CVE-2024-20741: 
Adobe Substance 3D Painter vulnerability analysis and mitigation

Substance3D - Painter versions 9.1.1 and earlier contain a Write-what-where Condition vulnerability that was discovered and disclosed on February 15, 2024. The vulnerability affects Adobe's Substance 3D Painter software, potentially allowing arbitrary code execution in the context of the current user (Adobe Advisory, NVD).

The vulnerability is classified as a Write-what-where Condition (CWE-123) and Out-of-bounds Write (CWE-787). It has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required for exploitation (NVD).

If successfully exploited, this vulnerability could lead to arbitrary code execution in the context of the current user, potentially compromising the confidentiality, integrity, and availability of the affected system (Adobe Advisory).

Users should update their Substance 3D Painter software to a version newer than 9.1.1 to address this vulnerability (Adobe Advisory).