CVE-2024-41862

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Aug 14, 2024
CWE ID 125

Summary

CVE-2024-41862 is a vulnerability affecting Substance3D's Sampler software versions 4.5 and prior. It involves an out-of-bounds read issue that could potentially expose sensitive memory. This vulnerability poses a risk as it may bypass mitigations like Address Space Layout Randomization (ASLR). To exploit this weakness, an attacker requires a user to open a maliciously crafted file.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share