Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Adobe Substance 3D Designer USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Substance 3D Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2023-26388 ZDI-CAN-20286: Adobe Substance 3D Stager USDZ File Parsing Memory Corruption Remote Code Execution Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26392: Use After Free

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26393: Out-of-bounds Read

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the curre...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates: Digital...

PT-2023-6618

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager version 2.0.1 and earlier Description The issue is related to an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2023-6363

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 12.4.0 and earlier Description The issue is related to a Use After Free vulnerability, which can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction,...

PT-2023-6321 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.1 and earlier Description: The issue is related to a Use After Free vulnerability, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2023-6621

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager version 2.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

PT-2023-6337

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager version 2.0.1 and earlier Description The issue is related to a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2023-2281

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 12.4.0 and earlier Description The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

PT-2023-6364 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Designer version 12.4.0 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attack...

PT-2023-6334 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager version 2.0.1 and earlier Description: The issue is related to an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypa...

PT-2023-6476

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 12.4.0 and earlier Description The issue is related to a stack-based buffer overflow in Adobe Substance 3D Designer. This can be exploited by an attacker to execute arbitrary code in the context of the...

PT-2023-6474

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Designer versions 12.4.0 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacke...

PT-2023-6323

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager versions 2.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...

PT-2023-6362

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager versions 2.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to disclose sensitive information by using a specially crafted file. This...

PT-2023-6335 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.1 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use...

PT-2023-6324 · Adobe · Substance3D - Stager

Name of the Vulnerable Software and Affected Versions: Adobe Substance 3D Stager versions 2.0.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker...