CVE-2024-53005

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Dec 10, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-530065.5Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an applicati CVE-2024-530076.4Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API CVE-2024-530085.3Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulnerability is exploited CVE-2024-530097.8Memory corruption while operating the mailbox in Automotive.CVE-2024-53017.8Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers CVE-2024-530107.8Memory corruption may occur while attaching VM when the HLOS retains access to VM.CVE-2024-530117.9Information disclosure may occur due to improper permission and access controls to Video Analytics engine.CVE-2024-530127.8Memory corruption may occur due to improper input validation in clock device.CVE-2024-530136.6Memory corruption may occur while processing voice call registration with user.CVE-2024-530147.8Memory corruption may occur while validating ports and channels in Audio driver.CVE-2024-530156.6Memory corruption while processing IOCTL command to handle buffers associated with a session.CVE-2024-530166.6Memory corruption while processing I2C settings in Camera driver.