CVE-2024-47439

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 10.1.0 and earlier

Description: The issue is related to a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to a denial-of-service condition. Exploitation requires user interaction, where a victim must open a malicious file. This could potentially allow an attacker to gain unauthorized access to protected information using a specially crafted file.

Recommendations: For versions 10.1.0 and earlier, update to a version later than 10.1.0 to resolve the issue. As a temporary workaround, consider avoiding the use of files from untrusted sources to minimize the risk of exploitation.