CVE-2023-26414

Adobe Substance 3D Designer (Windows/macOS) versions 12.4.0 and earlier are affected by a Use-After-Free vulnerability in USD file parsing that could lead to arbitrary code execution in the current user context. Exploitation requires user interaction (open a malicious file). The issue has been ad...

CVE-2023-26416

Adobe Substance 3D Designer

CVE-2023-26398

Adobe Substance 3D Designer vulnerability CVE-2023-26398 arises from an out-of-bounds read when parsing a crafted USDC/related file, allowing code execution in the context of the current user. The issue affects Substance 3D Designer version 12.4.0 and earlier and requires user interaction (victim...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A security vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user...

Adobe Substance 3D Designer 资源管理错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A resource management error vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from a post-release reuse vulnerability that could lead to the execution of arbitrary code in the current...

CVE-2023-26415 ZDI-CAN-20317: Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26409 ZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A buffer error vulnerability exists in Adobe Substance 3D Designer. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A security vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from a buffer overflow vulnerability that could lead to the execution of arbitrary code in the context of the current user...

CVE-2023-26412 ZDI-CAN-20314: Adobe Substance 3D Designer USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A buffer error vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from an out-of-bounds read vulnerability when parsing a crafted file, which could result in reading beyond the end of a...

CVE-2023-26412

CVE-2023-26412 affects Adobe Substance 3D Designer up to version 12.4.0. The root cause is a stack‑based buffer overflow in USDA file parsing, where input length was not properly validated, allowing arbitrary code execution in the context of the current user. Exploitation requires user interactio...

CVE-2023-26414 ZDI-CAN-20316: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26398 ZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

CVE-2023-26411 ZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

CVE-2023-26409 ZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A buffer error vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the current user's...

Adobe Substance 3D Designer 缓冲区错误漏洞

Adobe Substance 3D Designer is a 3D design software from Adobe. A buffer error vulnerability exists in Adobe Substance 3D Designer version 12.4.0 and prior versions, which stems from an out-of-bounds read vulnerability when parsing a crafted file, which could result in reading beyond the end of a...

CVE-2023-26398 ZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...

CVE-2023-26411 ZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Substance 3D Designer version 12.4.0 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the...