CVE-2024-41861: Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file
Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41861?
CVE-2024-41861 has a medium severity rating due to its potential for sensitive memory disclosure.
How do I fix CVE-2024-41861?
To address CVE-2024-41861, update Adobe Substance 3D Sampler to version 4.5.1 or later.
What kind of vulnerability is CVE-2024-41861?
CVE-2024-41861 is an out-of-bounds read vulnerability that leads to possible sensitive memory disclosure.
Is user interaction required to exploit CVE-2024-41861?
Yes, exploitation of CVE-2024-41861 requires user interaction.
What software versions are affected by CVE-2024-41861?
CVE-2024-41861 affects Adobe Substance 3D Sampler versions up to but not including 4.5.1.