CVE-2024-20750: Adobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability
Substance3D - Designer versions 13.1.0 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Substance 3D Designerto a version that resolves this vulnerability.Fixed in 13.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20750?
CVE-2024-20750 is considered a critical vulnerability due to its potential to allow an attacker to execute arbitrary code.
How do I fix CVE-2024-20750?
To fix CVE-2024-20750, update Adobe Substance 3D Designer to version 13.1.1 or later.
What versions of Adobe Substance 3D Designer are affected by CVE-2024-20750?
Adobe Substance 3D Designer versions 13.1.0 and earlier are affected by CVE-2024-20750.
What type of vulnerability is CVE-2024-20750?
CVE-2024-20750 is an out-of-bounds read vulnerability that can lead to reading past allocated memory.
Can CVE-2024-20750 lead to data breaches?
Yes, CVE-2024-20750 can potentially lead to data breaches if exploited, as it may allow execution of unauthorized code.