CVE-2024-20722: Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III
Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Substance 3D Painterto a version that resolves this vulnerability.Fixed in 9.1.1 - Upgrade
Upgrade
Adobe Substance 3D Painterto a version that resolves this vulnerability.Fixed in 9.0.1Build2822
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20722?
CVE-2024-20722 is classified as a high severity vulnerability due to the potential disclosure of sensitive memory.
How do I fix CVE-2024-20722?
To mitigate CVE-2024-20722, upgrade to Adobe Substance 3D Painter version 9.1.2 or later.
What type of vulnerability is CVE-2024-20722?
CVE-2024-20722 is an out-of-bounds read vulnerability.
What can an attacker achieve by exploiting CVE-2024-20722?
An attacker can potentially disclose sensitive memory information by exploiting CVE-2024-20722.
Does CVE-2024-20722 require user interaction for exploitation?
Yes, exploitation of CVE-2024-20722 requires user interaction.