APSB24-86 : Security update available for Adobe Substance 3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical and important vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to memory leak, arbitrary code execution and application denial-of-service...

CVE-2024-49522

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance 3D Painter version 10.0.1 and prior versions. An attacker exploiting this vulnerability could execute arbitrary code in the current user's environment...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models allows a hacker to trigger a service failure. This vulnerability is related to the handling of the null pointer.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models is related to the handling of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its ability to store arbitrary values anywhere and to overflow the buffer, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software lies in the ability to write any arbitrary value anywhere in the memory, thereby overflowing the buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...

The vulnerability of the Substance 3D Stager software lies in its susceptibility to overflowing buffer spaces, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of the buffer based on a queue. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Adobe Substance 3D Sampler Null Pointer Dereference Vulnerability

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photographic captures and scanned images into 3D texture and material assets. A null pointer dereference vulnerability exists in Adobe Substance 3D Sampler 4.5 and earlier...

The vulnerability of the Substance 3D Stager software lies in its susceptibility to overflowing buffer spaces, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of the buffer based on a queue. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in its software, which is exposed due to a buffer overflow in the dynamic memory. This allows an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to bypass the ASLR protection and gain unauthorized access to protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the Anti-Spyware Logic ASLR mechanism and gain unauthorized access to protect...

Adobe Substance 3D Sampler 代码问题漏洞

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photographic captures and scanned images into 3D texture and material assets. A null pointer dereference vulnerability exists in Adobe Substance 3D Sampler 4.5 and earlier...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code on the device while analyzing SKP files...

Adobe Substance 3D Painter Out-of-Bounds Read Vulnerability (CNVD-2024-44531)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. Adobe Substance 3D Painter suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

Adobe Substance 3D Sampler 3.0.4 Multiple Vulnerabilities (apsb24-81)

The version of Adobe Substance 3D Sampler installed on the remote host is prior to 3.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-81 advisory. - Substance3D - Stager versions 3.0.3 and earlier are affected by a Use After Free vulnerability that could...

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40924)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager. An attacker could exploit the vulnerability to execute arbitrary code in the current user's environment...

Adobe Substance 3D Stager Code Execution Vulnerability (CNVD-2024-40923)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. A security vulnerability exists in Adobe Substance 3D Stager that originates from a heap-based buffer overflow. An attacker could exploit the vulnerability to execute arbitrary code in the current user's...

Adobe Substance 3D Stager Buffer Overflow Vulnerability (CNVD-2024-40922)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. Adobe Substance 3D Stager suffers from a buffer overflow vulnerability that originates from allowing out-of-bounds writes to memory. An attacker could exploit the vulnerability to execute arbitrary code in t...