CVE-2024-20724

Summary

CVE-2024-20724 is a newly disclosed vulnerability affecting Substance3D's Painter software versions 9.1.1 and earlier. This issue involves an out-of-bounds read vulnerability, enabling an attacker to access sensitive memory content. By exploiting this weakness, attackers could potentially bypass important security mitigations like Address Space Layout Randomization (ASLR). Notably, this vulnerability requires user interaction, meaning a victim must open a specially crafted file to be susceptible to exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.