Adobe Substance 3D Designer Out-of-Bounds Read Vulnerability Allowing Memory Leak

A memory leak vulnerability due to an out-of-bounds read has been identified in Adobe Substance 3D Designer versions 14.1 and earlier. This vulnerability could lead to the unauthorized disclosure of sensitive memory. An attacker might exploit this issue to bypass security mitigations like Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability results in a memory leak, allowing sensitive information to be disclosed.

Remediation

Users are advised to update to Adobe Substance 3D Designer version 14.1.1. For managed environments, IT administrators can deploy this update using the Adobe Admin Console.