Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jqw-mwqp-mhq2

Опубликовано: 12 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker to write a controlled value at a controlled memory location, which could result in the disclosure of sensitive memory content. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker to write a controlled value at a controlled memory location, which could result in the disclosure of sensitive memory content. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

EPSS

Процентиль: 37%
0.00159
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-123
CWE-787

Связанные уязвимости

CVSS3: 5.5
nvd
около 1 года назад

Substance3D - Painter versions 10.1.0 and earlier are affected by a Write-what-where Condition vulnerability that could lead to a memory leak. This vulnerability allows an attacker to write a controlled value at a controlled memory location, which could result in the disclosure of sensitive memory content. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS3: 5.5
fstec
около 1 года назад

Уязвимость программы для текстурирования 3D-моделей Adobe Substance 3D Painter, связанная с записью произвольного значения в любое произвольное место и переполнением буфера, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 37%
0.00159
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-123
CWE-787