Executive Summary

This vulnerability affects Substance3D - Painter versions 11.1.2 and earlier. It is an out-of-bounds read vulnerability that could allow an attacker to access sensitive information stored in memory. To exploit this vulnerability, an attacker needs the victim to open a malicious file, which triggers the memory exposure.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that an attacker could gain access to sensitive information stored in the application's memory. This could lead to unauthorized disclosure of confidential data. However, exploitation requires user interaction, specifically opening a malicious file.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that users do not open malicious files in Substance3D - Painter versions 11.1.2 and earlier, as exploitation requires user interaction.

Additionally, update Substance3D - Painter to a version later than 11.1.2 once a patch or fix is available from Adobe.

Useful 0 Not Useful 0