CVE-2024-47440
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 125
Summary
CVE-2024-47440 is a recently disclosed vulnerability affecting Substance3D's Painter applications version 10.1.0 and earlier. This issue involves an out-of-bounds read vulnerability, which allows an attacker to access sensitive memory content beyond designated boundaries. This could potentially bypass mitigations like Address Space Layout Randomization (ASLR). Notably, exploitation of this vulnerability necessitates user interaction, meaning a victim must open a specially crafted file for an attack to be successful.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Adobe