CVE-2024-20725: Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability I
Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Substance 3D Painterto a version that resolves this vulnerability.Fixed in 9.1.1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20725?
CVE-2024-20725 is classified as a moderate severity vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2024-20725?
To fix CVE-2024-20725, update Adobe Substance 3D Painter to version 9.1.2 or later.
What type of vulnerability is CVE-2024-20725?
CVE-2024-20725 is an out-of-bounds read vulnerability.
What could an attacker achieve by exploiting CVE-2024-20725?
An attacker could exploit CVE-2024-20725 to disclose sensitive memory and potentially bypass mitigations like ASLR.
Does CVE-2024-20725 require user interaction for exploitation?
Yes, exploitation of CVE-2024-20725 requires user interaction.