Adobe Substance 3D Painter vulnerabilities

CVE-2025-30322 [HIGH] CWE-787 CVE-2025-30322: Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability Substance3D - Painter versions 11.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24450 [HIGH] CWE-787 CVE-2025-24450: Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-24451 [HIGH] CWE-787 CVE-2025-24451: Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-53957 [HIGH] CWE-122 CVE-2024-53957: Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulne Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-53958 [HIGH] CWE-787 CVE-2024-53958: Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49515 [HIGH] CWE-426 CVE-2024-49515: Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerabi Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to point to a malicious program, which the targeted applicatio

CVE-2024-47427 [HIGH] CWE-787 CVE-2024-47427: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49517 [HIGH] CWE-122 CVE-2024-49517: Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulne Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47429 [HIGH] CWE-787 CVE-2024-47429: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49519 [HIGH] CWE-787 CVE-2024-49519: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47430 [HIGH] CWE-787 CVE-2024-47430: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47433 [HIGH] CWE-787 CVE-2024-47433: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47428 [HIGH] CWE-787 CVE-2024-47428: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49518 [HIGH] CWE-787 CVE-2024-49518: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47431 [HIGH] CWE-122 CVE-2024-47431: Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulne Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47434 [HIGH] CWE-787 CVE-2024-47434: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49525 [HIGH] CWE-122 CVE-2024-49525: Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulne Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49520 [HIGH] CWE-787 CVE-2024-49520: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-49516 [HIGH] CWE-787 CVE-2024-49516: Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerabili Substance3D - Painter versions 10.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-47426 [HIGH] CWE-415 CVE-2024-47426: Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that c Substance3D - Painter versions 10.1.0 and earlier are affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.