
CVE-2024-20744 – Adobe Substance 3D Paint PICT Parsing Access Violation Write Vulnerability
https://notcve.org/view.php?id=CVE-2024-20744
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de escritura fuera de los límites que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. La expl... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-787: Out-of-bounds Write •

CVE-2024-20724 – Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability II
https://notcve.org/view.php?id=CVE-2024-20724
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confi... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-125: Out-of-bounds Read •

CVE-2024-20743 – Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability
https://notcve.org/view.php?id=CVE-2024-20743
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de escritura fuera de los límites que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. La expl... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-787: Out-of-bounds Write •

CVE-2024-20722 – Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III
https://notcve.org/view.php?id=CVE-2024-20722
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confi... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-125: Out-of-bounds Read •

CVE-2024-20740 – Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability
https://notcve.org/view.php?id=CVE-2024-20740
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de escritura fuera de los límites que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. La expl... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-787: Out-of-bounds Write •

CVE-2024-20742 – Adobe Substance 3D Paint RAS File Parsing Out-Of-Bounds Read Vulnerability
https://notcve.org/view.php?id=CVE-2024-20742
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de lectura fu... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-125: Out-of-bounds Read •

CVE-2024-20741 – Adobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability
https://notcve.org/view.php?id=CVE-2024-20741
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de condición Write-what-where que podría resultar en la ejecución de código arbitrario en el contexto del usuario actual. La ex... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-123: Write-what-where Condition CWE-787: Out-of-bounds Write •

CVE-2024-20723 – Adobe Substance 3D Painter v9.0.1Build2822 Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2024-20723
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de desbordamiento de búfer que podría provocar la ejecución de código arbitrario en el contexto del usuario actual. La explotación de este... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVE-2024-20725 – Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability I
https://notcve.org/view.php?id=CVE-2024-20725
15 Feb 2024 — Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Substance3D: las versiones 9.1.1 y anteriores de Painter se ven afectadas por una vulnerabilidad de lectura fuera de los límites que podría provocar la divulgación de memoria confi... • https://helpx.adobe.com/security/products/substance3d_painter/apsb24-04.html • CWE-125: Out-of-bounds Read •

CVE-2023-29281 – ZDI-CAN-20364: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-29281
10 May 2023 — Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe ... • https://helpx.adobe.com/security/products/substance3d_painter/apsb23-29.html • CWE-125: Out-of-bounds Read •