Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Design/Logic Flaw

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26379

CVE-2023-26379 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read that can disclose memory content and bypass ASLR. Exploitation requires the user to open a malicious file, per NVD/NVDB entries. The issue is addressed in Adobe’s APSB23-27 update (Dimension 3.4.9), with broader ...

CVE-2023-26386

Adobe Substance 3D Stager is affected by CVE-2023-26386: an Access of Uninitialized Pointer in 2.0.1 and earlier can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Stager parsing USDC/file content; impact describe...

CVE-2023-26385 ZDI-CAN-20267: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that ...

CVE-2023-26375

Adobe Dimension CVE-2023-26375 is an out-of-bounds read vulnerability affecting Dimension 3.4.8 and earlier that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). This CVE is corroborated by multiple sources (NVD/C...

CVE-2023-26378

Adobe Dimension 3.4.8 (and earlier) is affected by an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the victim to open a malicious file. The issue is confirmed across multiple sources (NVD/NCSC/ZDI) and a fix was released to 3.4.9 via APSB2...

CVE-2023-26385

Adobe Substance 3D Stager is affected by an out-of-bounds read in USD file parsing (CVE-2023-26385) affecting 2.0.1 and earlier. The flaw can disclose memory and bypass ASLR, with exploitation requiring user interaction (victim opens a malicious file). Several sources corroborate a USD file parsi...

CVE-2023-26380 ZDI-CAN-20150: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26376

CVE-2023-26376 affects Adobe Dimension 3.4.8 and earlier and is an out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented across multiple sources (NVD/NCSC/Nessus) ...

CVE-2023-26404

CVE-2023-26404 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the user to open a malicious file. Mitigation is to update to Dimension 3.4.9 as part of APSB23-27; the issue is documented acro...

CVE-2023-26397

CVE-2023-26397 affects Adobe Acrobat Reader versions 23.001.20093 and 20.005.30441 (and earlier). The issue is an out-of-bounds read in a component that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction—an attacker must lure a user to open...

CVE-2023-26380

Summary: CVE-2023-26380 affects Adobe Dimension 3.4.8 and earlier and is described as an out-of-bounds read vulnerability that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, indicating a user interaction requirement. Affe...