Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-12463)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee (Adobe). A buffer error vulnerability exists in Adobe Substance 3D Painter 9.1.1 and prior versions, which stems from an out-of-bounds read while parsing a carefully crafted file, which could result in a read beyond the end of an allocated memory structure. A remote attacker could exploit the vulnerability to execute arbitrary code.