CVE-2024-30307

Name of the Vulnerable Software and Affected Versions Substance3D - Painter versions 9.1.2 and earlier

Description The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file. This allows an attacker to potentially execute arbitrary code by having the victim open a specially crafted malicious file.

Recommendations For Substance3D - Painter versions 9.1.2 and earlier, update to a version later than 9.1.2 to resolve the issue. As a temporary workaround, consider avoiding the use of files from untrusted sources to minimize the risk of exploitation.