Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-12464)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee (Adobe). A buffer overflow vulnerability exists in Adobe Substance 3D Painter 9.1.1 and prior versions, which stems from the presence of an out-of-bounds write that could lead to the execution of arbitrary code in the context of the current user. An attacker can exploit the vulnerability to execute unauthorized commands, which can be used to gain system privileges and consequently perform various illegal operations.