CVE-2024-52994: 
Adobe Substance 3D Sampler vulnerability analysis and mitigation

CVE-2024-52994 is an out-of-bounds write vulnerability affecting Adobe Substance3D - Sampler versions 4.5.1 and earlier. The vulnerability was disclosed on December 10, 2024, and affects the Adobe Substance 3D Sampler software (NVD, CIS Advisory).

The vulnerability is classified as an out-of-bounds write vulnerability with a CVSS v3.1 Base Score of 7.8 (HIGH). The attack vector is Local (L), with Low attack complexity (L), requiring no privileges (N), but does need user interaction (R). The scope is Unchanged (U), with High impacts to Confidentiality (H), Integrity (H), and Availability (H) (NVD).

If exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The exploitation requires user interaction, specifically requiring a victim to open a malicious file (NVD).

The vulnerability requires user interaction for successful exploitation, as the victim must open a malicious file. The attack vector is local, indicating that the attacker needs local access or must convince the user to open a specially crafted file (NVD).

Adobe has released version 4.5.2 of Substance 3D Sampler to address this vulnerability. Users of affected versions are advised to update to the latest version (NVD).