CVE-2024-47430
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 787
Summary
CVE-2024-47430 is a newly identified vulnerability affecting Substance3D's Painter software in versions 10.1.0 and older. This issue involves an out-of-bounds write vulnerability that potentially allows arbitrary code execution. The exploitation of this flaw requires user interaction as the victim needs to open a maliciously crafted file to trigger the issue in the context of their current user privileges.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Adobe