CVE-2023-26384: ZDI-CAN-20279: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability
Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26384?
CVE-2023-26384 has a high severity rating due to its potential for arbitrary code execution.
How do I fix CVE-2023-26384?
To fix CVE-2023-26384, update Adobe Substance 3D Stager to version 2.0.2 or later.
What causes the CVE-2023-26384 vulnerability?
CVE-2023-26384 is caused by a Use After Free vulnerability that occurs when processing malicious files.
What are the potential impacts of CVE-2023-26384?
The potential impacts of CVE-2023-26384 include arbitrary code execution, which could allow an attacker to take control of the affected system.
Is user action required to exploit CVE-2023-26384?
Yes, exploitation of CVE-2023-26384 requires user interaction, as the victim must open a malicious file.