Executive Summary

This vulnerability affects Substance3D - Painter versions 11.1.2 and earlier. It is a NULL Pointer Dereference issue that can cause the application to crash, resulting in a denial-of-service condition. To exploit this vulnerability, an attacker needs the victim to open a malicious file, which triggers the crash.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is the disruption of application availability. An attacker can cause the Substance3D - Painter application to crash by exploiting the NULL Pointer Dereference, leading to denial-of-service. This means users may experience unexpected application shutdowns, interrupting their work.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, avoid opening malicious files in Substance3D - Painter versions 11.1.2 and earlier, as exploitation requires user interaction through opening a malicious file.

Consider updating to a version later than 11.1.2 if available, or applying any patches provided by Adobe to address this NULL Pointer Dereference vulnerability.

Useful 0 Not Useful 0