Adobe Substance 3D Painter Buffer Overflow Vulnerability (CNVD-2024-12465)

Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee (Adobe). A buffer overflow vulnerability exists in Adobe Substance 3D Painter 9.1.1 and prior versions, which stems from the presence of an out-of-bounds write vulnerability that could lead to the execution of arbitrary code in the current user’s environment. An attacker can exploit the vulnerability to execute unauthorized commands, which can be used to gain system privileges and consequently perform various illegal operations.