Adobe Substance 3D Designer Out-of-Bounds Write Vulnerability

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer version 13.1.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the curren...

PT-2025-28264 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a type confusion vulnerability in the PM3 file parsing mechanism, which can lead to remote code execution. Recommendations: At the moment, there is no...

PT-2025-28261 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

PT-2025-28265 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

PT-2025-28263 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

PT-2025-28262 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

Adobe Substance 3D Designer < 14.0 (apsb24-67)

The version of Adobe Substance 3D Designer installed on the remote host is prior to 14.0. It is, therefore, affected by a vulnerability as referenced in the apsb24-67 advisory. - Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could...

CVE-2024-41864

Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-41864

Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-41864 Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability

Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-41864 Adobe Substance 3D Designer ICO Parsing Out-Of-Bounds Write Vulnerability

Substance3D - Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-41864

CVE-2024-41864 affects Substance3D Designer

PT-2024-29605 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 13.1.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Designer version 13.1.2 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the curren...

Security Bulletin: IBM DataStage Flow Designer is vulnerable to information disclosure (CVE-2024-40704)

Summary An information disclosure vulnerability in DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2024-40704 DESCRIPTION: IBM DataStage Flow Designer could allow a privileged user to obtain sensitive information from authentication request headers. CVSS Base score: 4.9 CVS...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows attackers to bypass the ASLR protection and gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection and gain unauthorized access to protected information using a speciall...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows attackers to bypass the ASLR protection and gain unauthorized access to protected information.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection and gain unauthorized access to protected information using a speciall...

WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Emili Castells Patchstack Alliance in WordPress Plugin Product Designer versions = 1.0.33...

WordPress Product Designer Plugin <= 1.0.33 is vulnerable to Arbitrary Content Deletion

Software Product Designer Type Plugin Vulnerable versions = 1.0.33 Fixed in 1.0.34 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-38726 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 863c0e79b2db Credits Emili Castells...

New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk

Select versions of the OpenSSH secure networking suite are susceptible to a new vulnerability that can trigger remote code execution RCE. The vulnerability, tracked as CVE-2024-6409 CVSS score: 7.0, is distinct from CVE-2024-6387 aka RegreSSHion and relates to a case of code execution in the...