CVE-2024-20713

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 10, 2024
Updated: Jan 12, 2024
CWE ID 125

Summary

CVE-2024-20713 is a newly disclosed vulnerability impacting Adobe Substance 3D Stager versions 2.1.3 and prior. This issue constitutes an out-of-bounds read vulnerability, allowing an attacker to potentially access sensitive memory content. By exploiting this flaw, adversaries could bypass mitigations such as Address Space Layout Randomization (ASLR), increasing the risk of successful attacks. User interaction is a prerequisite for exploitation, necessitating that a victim opens a maliciously crafted file.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Adobe Substance 3D Stager

Affected Vendors

  • Adobe

Advisories, Assessments, and Mitigations