CVE-2024-51721
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 59
Summary
CVE-2024-47426 is a newly disclosed vulnerability affecting Substance3D's Painter software versions 10.1.0 and earlier. This issue involves a Double Free vulnerability, which can lead to arbitrary code execution. The exploitation of this flaw requires user interaction, meaning a victim must open a malicious file to be vulnerable. Successful exploitation can result in the attacker gaining control of the affected system with the privileges of the current user. Painter users are advised to update to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- SecuSUITE