CVE-2024-53957: 
Adobe Substance 3D Painter vulnerability analysis and mitigation

A Heap-based Buffer Overflow vulnerability (CVE-2024-53957) was discovered in Adobe Substance3D - Painter versions 10.1.1 and earlier. The vulnerability was disclosed on December 10, 2024, affecting Adobe Substance 3D Painter software (NVD).

The vulnerability is classified as a Heap-based Buffer Overflow (CWE-122) with a CVSS v3.1 base score of 7.8 (HIGH). The attack vector is Local (AV:L) with Low attack complexity (AC:L), requiring no privileges (PR:N) but does need user interaction (UI:R). The scope is Unchanged (S:U) with High impacts to Confidentiality, Integrity, and Availability (C:H/I:H/A:H) (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The exploitation requires user interaction, specifically opening a malicious file (NVD).

The vulnerability requires user interaction for successful exploitation, specifically requiring a victim to open a malicious file. The attack vector is local, indicating that the attacker needs local access to the target system (NVD).

Adobe has released version 10.1.2 to address this vulnerability. Users are advised to update their Adobe Substance 3D Painter software to a version newer than 10.1.1 (NVD).