The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from a buffer overflow in its dynamic memory. This allows attackers to execute arbitrary code within the context of the current user.

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created fi...

3D Avatar User Profile <= 1.0.0 - Reflected Cross-Site Scripting

Description The 3D Avatar User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-47810

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-47810: Use After Free

A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a 3D page object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs ...

CVE-2024-54358

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Enrico Cantori 3D Avatar User Profile 3d-avatar-user-profile allows Reflected XSS.This issue affects 3D Avatar User Profile: from n/a through = 1.0.0...

CVE-2024-54358

CVE-2024-54358 is a Reflected XSS in the WordPress plugin for 3D Avatar User Profile (avatar 3D Creator/3D Avatar User Profile). The description states the issue as an Improper Neutralization of Input During Web Page Generation and affects 3D Avatar User Profile: from n/a through 1.0.0. The conne...

CVE-2024-54358: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Enrico Cantori 3D Avatar User Profile 3d-avatar-user-profile allows Reflected XSS.This issue affects 3D Avatar User Profile: from n/a through = 1.0.0...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows attackers to execute arbitrary code. This vulnerability stems from buffer overflows in the dynamic memory, enabling attackers to exploit the system.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Substance 3D Sampler Heap Buffer Overflow Vulnerability (CNVD-2025-00385)

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. Adobe Substance 3D Sampler suffers from a heap buffer overflow vulnerability that can be exploited by an...

Adobe Substance 3D Sampler 4.5.2 Multiple Vulnerabilities (apsb24-100)

The version of Adobe Substance 3D Sampler installed on the remote host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-100 advisory. - Substance3D - Sampler versions 4.5.1 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe Substance 3D Painter Out-of-Bounds Write Vulnerability (CNVD-2025-00383)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Painter < 10.1.2 Multiple Vulnerabilities (APSB24-105) (macOS)

The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities: - Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code...

Adobe Substance 3D Painter Heap Buffer Overflow Vulnerability (CNVD-2025-00384)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Sampler Heap Buffer Overflow Vulnerability

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. Adobe Substance 3D Sampler suffers from a heap buffer overflow vulnerability that originates from a bounda...

Adobe Substance 3D Modeler Null Pointer Dereference Vulnerability

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Adobe Substance 3D Modeler Out-of-Bounds Write Vulnerability (CNVD-2025-00376)

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Adobe Substance 3D Modeler null pointer dereference vulnerability (CNVD-2025-00374)

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause a denial of service...

Adobe Substance 3D Modeler Out-of-Bounds Read Vulnerability (CNVD-2025-00379)

Adobe Substance 3D Modeler is a powerful 3D modeling and sculpting software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Modeler, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe Substance 3D Modeler Out-of-Bounds Write Vulnerability (CNVD-2025-00378)

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...