CVE-2024-20750: 
Adobe Substance 3D Designer vulnerability analysis and mitigation

Adobe Substance 3D Designer versions 13.1.0 and earlier contain an out-of-bounds read vulnerability when parsing a crafted file. The vulnerability was discovered and disclosed in February 2024, with Adobe releasing a security advisory (APSB24-13) to address the issue (Adobe Advisory).

The vulnerability is classified as an out-of-bounds read (CWE-125) that occurs when parsing a crafted file, which could result in a read past the end of an allocated memory structure. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute code in the context of the current user. The high CVSS score indicates potential severe impacts on system confidentiality, integrity, and availability (NVD).

Adobe has released version 13.1.1 of Substance 3D Designer to address this vulnerability. Users are advised to update to the latest version immediately after appropriate testing (CIS Advisory).