55 matches found
CVE-2024-30308
CVE-2024-30308 affects Substance3D Painter up to version 9.1.2. The issue is an out-of-bounds read in PSD/file parsing that could disclose sensitive memory and enable bypassing ASLR. Exploitation requires user interaction (victim opens a malicious file). Public sources indicate a fix via Adobe AP...
CVE-2024-30309
CVE-2024-30309 affects Substance3D Painter, specifically versions ≤ 9.1.2. The issue is an out-of-bounds read in the TGA file parsing path that can disclose sensitive memory and could bypass ASLR. Exploitation requires the victim to open a malicious file (user interaction). Remediation is to upda...
CVE-2024-30274
CVE-2024-30274 affects Adobe Substance 3D Painter up to version 9.1.2. It is an out-of-bounds write in ABC file parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected software: S...
CVE-2024-30307
Substance3D Painter
CVE-2024-47426
CVE-2024-47426 affects Substance3D Painter
CVE-2024-47438
Summary: CVE-2024-47438 affects Substance3D Painter (v10.1.0 and earlier). The issue is a Write-what-where condition leading to a memory leak and potential disclosure of memory content. Exploitation requires user interaction (victim opens a malicious file) and is described with a local attack vec...
CVE-2024-53957
Substance3D Painter 10.1.1 and earlier are affected by a Heap-based Buffer Overflow that could allow arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim opens a malicious file). The vulnerability is documented as CVE-2024-53957. Affect...
CVE-2024-47433
Substance3D Painter ≤ 10.1.0 is affected by an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user, requiring the victim to open a malicious file. Mitigation: apply Adobe APSB24-86 update to 10.1.1 or later. Affected platforms/versions exact ...
CVE-2024-47436
CVE-2024-47436 describes an out-of-bounds read in Substance3D Painter
CVE-2024-47440
Substance3D Painter 10.1.0 and earlier are affected by an out-of-bounds read (CWE-125) that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product: Adobe Substance 3D Painter; vulnerability is addressed by the vendor in the ...
CVE-2024-53958
CVE-2024-53958 affects Substance 3D Painter
CVE-2025-24451
CVE-2025-24451 (Substance3D Painter) affects Substance3D Painter 10.1.2 and earlier. It is an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. ...
CVE-2024-47429
Adobe Substance 3D Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-47429) that could lead to arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim opens a malicious file). This is corrob...
CVE-2025-24450
CVE-2025-24450 affects Adobe Substance 3D Painter (versions 10.1.2 and earlier). The vulnerability is an out-of-bounds write (CWE-787) that could enable arbitrary code execution in the context of the current user, with exploitation requiring user interaction (victim must open a malicious file). M...
CVE-2024-47428
CVE-2024-47428 affects Substance3D Painter
CVE-2024-49520
CVE-2024-49520 concerns Adobe Substance 3D Painter. Affected: Painter versions 10.1.0 and earlier. Issue: out-of-bounds write (CWE-787) potentially leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file...
CVE-2024-49525
CVE-2024-49525 affects Substance3D Painter up to version 10.1.0, where a heap-based buffer overflow could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Public sources consistently describe the issue a...
CVE-2024-47437
Substance3D Painter, versions 10.1.0 and earlier, are affected by an out-of-bounds read vulnerability (CVE-2024-47437) that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product/version details are corroborated across multi...
CVE-2024-49516
CVE-2024-49516 affects Adobe Substance 3D Painter, versions 10.1.0 and earlier. The issue is an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction) and is describ...
CVE-2025-30322
Adobe Substance 3D Painter 11.0 and earlier is affected by an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Remediation: update to a version later than 11.0 (per APSB25-38/P...
CVE-2024-47430
Substance3D Painter
CVE-2024-20787
CVE-2024-20787 affects Substance 3D Painter (versions ≤ 10.0.1). It is an out-of-bounds read vulnerability in Painter’s code that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Affected guidance indicates remediation via updates to...
CVE-2024-47439
CVE-2024-47439 concerns Substance3D Painter prior to version 10.1.1, where a NULL pointer dereference in the application can crash Painter, yielding a denial‑of‑service condition. The issue requires user interaction (victim opens a crafted file) and affects the core Painter executable’s handling ...
CVE-2024-49519
Substance3D Painter up to version 10.1.0 is affected by an out-of-bounds write vulnerability (CWE-787) that could enable arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Public sources (NVD/CVE, CNVD, NTKB) corroborate the issue an...
CVE-2024-47435
Substance 3D Painter (Windows/macOS) versions ≤ 10.1.0 are affected by an out-of-bounds read (CWE-125) that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file), with a local attack surface. The vulnerability impact...
CVE-2024-47432
CVE-2024-47432 affects Substance3D Painter versions 10.1.0 and earlier. The issue is an out-of-bounds write (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Impact is high (C/H/I/A...
CVE-2024-49515
Substance3D Painter
CVE-2024-49517
Substance3D Painter, version 10.1.0 and earlier, is affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Remediation: update to a version later than 10.1.0 (e.g., apply APSB2...
CVE-2024-47431
Adobe Substance 3D Painter versions 10.1.0 and earlier are affected by a heap-based buffer overflow (CWE-122) that could enable arbitrary code execution in the current user context. Exploitation requires user interaction (opening a malicious file). A patch is available (APSB24-86) addressing thes...
CVE-2024-49522
Substance3D Painter
CVE-2024-47434
Adobe Substance 3D Painter is affected in versions 10.1.0 and earlier by an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). Connected sources indicate a security update (APS ...
CVE-2024-47427
CVE-2024-47427 affects Adobe Substance 3D Painter up to version 10.1.0, with an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). The issue is acknowledged across multiple sources; reme...
CVE-2024-49518
Summary: CVE-2024-49518 affects Substance3D Painter 10.1.0 and earlier, with an out-of-bounds write that could lead to arbitrary code execution in the current user context. Impact as stated: requires user interaction (victim must open a malicious file). Affected components: Substance3D Painter, v...
CVE-2025-47108
The CVE-2025-47108 entry concerns Substance3D Painter prior to 11.0.2 (11.0.1 and earlier). The issue is an out-of-bounds write that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versi...
CVE-2025-54195
CVE-2025-54195: Substance3D Painter is affected in version 11.0.2 and earlier by an out-of-bounds read that can disclose memory. Exploitation requires the user to open a malicious file. Remediation: apply the Adobe APSB25-77 security update to address the vulnerability (recommended update path me...
CVE-2026-21305
Summary: CVE-2026-21305 affects Substance3D Painter (version 11.0.3 and earlier). The issue is an out-of-bounds write (CWE-787) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The CVSS base ...
CVE-2026-21365
CVE-2026-21365 affects Adobe Substance 3D Painter up to and including version 11.1.2, with an out-of-bounds read that can expose memory contents. Exploitation requires user interaction: a victim must open a malicious file. Connected sources confirm the affected software and root cause; a remediat...
CVE-2025-54189
Adobe Substance 3D Painter is affected by an out-of-bounds read vulnerability in versions up to and including 11.0.2, which can disclose memory contents. exploitation requires the user to open a malicious file, and the CVE is documented as CVE-2025-54189. The issue originates from Substance3D Pai...
CVE-2025-54187
CVE-2025-54187 applies to Substance3D Painter versions up to 11.0.2, which are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution under the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected vendors list Adob...
CVE-2026-34676
Affected product : Substance3D Painter; versions 12.0.2 and earlier. Vulnerability : out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Impact : arbitrary code execution if exploited. Conditions : exploitation requires user interaction; a v...
CVE-2025-54192
CVE-2025-54192 affects Adobe Substance3D Painter, specifically versions 11.0.2 and earlier . The issue is an out-of-bounds read that can lead to disclosure of memory. Exploitation requires user interaction, with a victim opening a malicious file. The connected documents consistently describe the ...
CVE-2025-54190
CVE-2025-54190 affects Substance3D Painter
CVE-2025-54188
CVE-2025-54188 affects Substance3D Painter up to version 11.0.2. It is an out-of-bounds read that could disclose memory contents; exploitation requires the user to open a malicious file (UI interaction, local attack vector). The CVE has a CVSS v3.1 base score of 5.5 (Medium), with confidentiality...
CVE-2025-54191
Affected software : Substance3D Painter up to version 11.0.2 (and earlier). Vulnerability : out-of-bounds read in Painter that can lead to disclosure of sensitive memory. Conditions : exploit requires user interaction; a victim must open a malicious file. Impact details : memory disclosure (confi...
CVE-2025-54193
Substance3D Painter is affected in versions 11.0.2 and earlier by an out-of-bounds read vulnerability that could disclose sensitive memory. Exploitation requires user interaction (victim opens a malicious file). The CVE is CVE-2025-54193. Multiple sources corroborate the affected version range an...
CVE-2026-27214
Substance3D Painter before 11.1.3 (affected: 11.1.2 and earlier) is impacted by a NULL Pointer Dereference that can crash the application and cause denial of service. Exploitation requires a user to open a malicious file, and the issue is described in CVE-2026-27214 with remediation noted as upda...
CVE-2026-34675
Substance3D Painter prior to version 12.0.3 is affected by an out-of-bounds write vulnerability (CWE-787) that can enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Affected product: Substance3D Paint...
CVE-2025-54194
CVE-2025-54194 affects Substance3D Painter
CVE-2026-21363
Substance3D Painter is affected by CVE-2026-21363: a NULL Pointer Dereference in versions 11.1.2 and earlier can cause a denial-of-service crash. Exploitation requires the user to open a malicious file, indicating a user-interaction prerequisite. Public sources (NVD/Red Hat/Nessus) corroborate th...