CVE-2023-26416: ZDI-CAN-20318: Adobe Substance 3D Designer DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-26416?
CVE-2023-26416 is a Heap-based Buffer Overflow vulnerability in Adobe Substance 3D Designer version 12.4.0 (and earlier) that could lead to arbitrary code execution.
How does CVE-2023-26416 affect Adobe Substance 3D Designer?
CVE-2023-26416 affects Adobe Substance 3D Designer version 12.4.0 (and earlier) and allows for arbitrary code execution in the context of the current user.
What is the severity level of CVE-2023-26416?
CVE-2023-26416 has a severity level of 7.8, which is considered high.
What is the recommended action to fix CVE-2023-26416?
To fix CVE-2023-26416, users should update to a version of Adobe Substance 3D Designer that is not affected by this vulnerability.
Is Apple macOS or Microsoft Windows affected by CVE-2023-26416?
No, Apple macOS and Microsoft Windows are not affected by CVE-2023-26416.