CVE-2024-30308

CVE-2024-30308 affects Substance3D Painter up to version 9.1.2. The issue is an out-of-bounds read in PSD/file parsing that could disclose sensitive memory and enable bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file). Public sources indicate a fix via Adobe AP...

CVE-2024-30308 Adobe Substance 3D Painter PSD File Parsing Acces Violation Read Vulnerability

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-30274 Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability

Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30274 Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability

Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-30309

CVE-2024-30309 affects Substance3D Painter, specifically versions ≤ 9.1.2. The issue is an out-of-bounds read in the TGA file parsing path that can disclose sensitive memory and could bypass ASLR. Exploitation requires the victim to open a malicious file (user interaction). Remediation is to upda...

CVE-2024-30309 Adobe Substance 3D Painter TGA File Parsing Acces Violation Read Vulnerability

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-30309 Adobe Substance 3D Painter TGA File Parsing Acces Violation Read Vulnerability

Substance3D - Painter versions 9.1.2 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-30274

CVE-2024-30274 affects Adobe Substance 3D Painter up to version 9.1.2. It is an out-of-bounds write in ABC file parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected software: S...

Adobe Substance 3D Painter out-of-bounds write vulnerability (CNVD-2024-27549)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Painter. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability previously existed in Adobe Substance 3D Painter version 9.1.2, which originated from being affected by an out-of-bounds read vulnerability. An attacker could exploit...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability previously existed in Adobe Substance 3D Painter version 9.1.2, which originated from being affected by an out-of-bounds write vulnerability. An attacker could exploit...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer error vulnerability previously existed in Adobe Substance 3D Painter version 9.1.2, which originated from being affected by an out-of-bounds read vulnerability. An attacker could exploit the...

Adobe Substance 3D Painter < 10.0.0 Multiple Vulnerabilities (APSB24-31) (macOS)

The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 10.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-31 advisory. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the...

Adobe Substance 3D Painter 缓冲区错误漏洞

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Substance 3D Painter. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2024-3504 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2024-3503 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2024-4794 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. An attacker could leverage this to bypass mitigations such as ASLR. Exploitatio...

PT-2024-4795 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 9.1.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability in the program. This could allow an attacker to bypass the Address Space Layout Randomization ASLR protection mechanism...

APSB24-31 : Security update available for Adobe Substance3D Painter

Adobe has released an update for Adobe Substance 3D Painter. This update addresses critical and important vulnerabilities in Adobe Substance 3D Painter. Successful exploitation could lead to arbitrary code execution and memory leak...

Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-11673)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Painter 9.1.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code on the system, causing the application...