CVE-2024-39388

Summary

CVE-2024-39388 is a Use After Free vulnerability impacting Substance3D's Stager software versions 3.0.2 and earlier. This issue allows an attacker to execute arbitrary code in the context of the current user, once they have manipulated a victim into opening a maliciously crafted file. The flaw occurs due to improper memory handling within the software, resulting in a potential memory corruption and subsequent code execution. Users are advised to update their Substance3D Stager software to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.