CVE-2024-49522

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 5, 2024
Updated: Nov 8, 2024
CWE ID 787

Summary

CVE-2024-49522 is a newly identified vulnerability affecting Substance3D's Painter software versions 10.0.1 and prior. This issue involves an out-of-bounds write vulnerability, which could potentially allow attackers to execute arbitrary code if a victim opens a maliciously crafted file. The exploitation of this vulnerability requires user interaction, making it a potential threat to users of the affected software.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share