Adobe Substance 3D Painter Out-of-Bounds Read Vulnerability Leading to Memory Leak

A memory leak vulnerability due to an out-of-bounds read has been identified in Adobe Substance 3D Painter, affecting versions through 11.0.2. This vulnerability could lead to the unauthorized disclosure of sensitive memory. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability causes a memory leak, allowing sensitive information to be disclosed.

Remediation

Users are advised to update to Adobe Substance 3D Painter version 11.0.3. For managed environments, IT administrators can deploy this update using the Adobe Admin Console.