CVE-2023-29284
Published: 11 May 2023
Summary
CVE-2023-29284 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Adobe Substance 3D Painter. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 27.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Deeper analysis
Adobe Substance 3D Painter versions 8.3.0 and earlier contain a stack-based buffer overflow vulnerability, tracked under CWE-121 and CWE-787, that can result in arbitrary code execution. The flaw carries a CVSS 3.1 score of 7.8 with an attack vector of local access, low complexity, no privileges required, and required user interaction.
An attacker can exploit the issue by supplying a malicious file that a victim must open, after which code runs in the context of the current user. No remote or unauthenticated execution path is described.
The referenced Adobe security advisory at helpx.adobe.com/security/products/substance3d_painter/apsb23-29.html addresses mitigation steps and available patches for the affected Substance 3D Painter releases.
The EPSS score rose materially from a low baseline to a peak of 0.0507 on 2025-01-22 before receding to the current value of 0.0010, indicating that exploitation interest emerged after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-32859
Vulnerability details
Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a…
more
victim must open a malicious file.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.