CVE-2024-53958

Summary

CVE-2024-53958 is a newly disclosed vulnerability affecting Substance3D's Painter software, specifically versions 10.1.1 and older. This issue involves an out-of-bounds write vulnerability that can lead to arbitrary code execution, giving attackers the ability to run malicious code within the context of the current user. The exploitation of this flaw requires user intervention, meaning that a victim must first open a maliciously crafted file before the attack can be executed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.