CVE-2024-52998: Substance3D - Stager | Out-of-bounds Read (CWE-125)
Published Nov 22, 2024
·Updated
Substance3D - Stager versions 3.0.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
3 affected components
All of the following
Adobe Substance 3D Stager<3.0.3
Any of the following
macOS
Microsoft Windows
Event History
Nov 22, 2024
CVE Published
via MITRE·07:11 PM
Data Sourced
via MITRE·07:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-52998?
CVE-2024-52998 has a high severity rating due to its potential for sensitive memory disclosure.
2
How do I fix CVE-2024-52998?
To mitigate CVE-2024-52998, upgrade to Adobe Substance 3D Stager version 3.0.3 or later.
3
Who is affected by CVE-2024-52998?
CVE-2024-52998 affects users of Adobe Substance 3D Stager versions 3.0.2 and earlier.
4
What kind of vulnerability is CVE-2024-52998?
CVE-2024-52998 is an out-of-bounds read vulnerability.
5
Can CVE-2024-52998 be exploited remotely?
CVE-2024-52998 requires user interaction for exploitation.