CVE-2024-49525

CVE-2024-49525 affects Substance3D Painter up to version 10.1.0, where a heap-based buffer overflow could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Public sources consistently describe the issue a...