Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

The version of Adobe Substance 3D Painter installed on the remote macOS host is prior to 10.1.2. It is, therefore, affected by multiple vulnerabilities:

  - Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could     result in arbitrary code execution in the context of the current user. (CVE-2024-53957)

  - Substance3D - Painter versions 10.1.1 and earlier are affected by an heap based buffer overflow vulnerability that     could result in arbitrary code execution in the context of the current user. (CVE-2024-53958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2024-53957

high

Tenable Plugins

high