PT-2023-8548 · Adobe · Substance3D - Designer
Published
2023-12-12
·
Updated
2023-12-18
·
CVE-2023-48636
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Adobe Substance 3D Designer versions 13.0.0 and earlier
Adobe Substance 3D Designer versions 13.1.0 and earlier
Description
The issue is related to an out-of-bounds read vulnerability in the Adobe Substance 3D Designer program. This vulnerability could allow an attacker to gain unauthorized access to protected information by using a specially crafted file. Exploitation of this issue requires user interaction, where a victim must open a malicious file. The vulnerability could lead to the disclosure of sensitive memory and potentially allow an attacker to bypass mitigations such as Address Space Layout Randomization (ASLR).
Recommendations
For Adobe Substance 3D Designer versions 13.0.0 and earlier, update to a version later than 13.0.0 to resolve the issue.
For Adobe Substance 3D Designer versions 13.1.0 and earlier, update to a version later than 13.1.0 to resolve the issue.
As a temporary workaround, consider avoiding the use of potentially malicious files with Adobe Substance 3D Designer until a patch is available.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Substance3D - Designer