CVE-2023-26382: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26400: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26375: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26379

CVE-2023-26379 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read that can disclose memory content and bypass ASLR. Exploitation requires the user to open a malicious file, per NVD/NVDB entries. The issue is addressed in Adobe’s APSB23-27 update (Dimension 3.4.9), with broader ...

CVE-2023-26380: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26374: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26404

CVE-2023-26404 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the user to open a malicious file. Mitigation is to update to Dimension 3.4.9 as part of APSB23-27; the issue is documented acro...

CVE-2023-26401 ZDI-CAN-20278: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26386 ZDI-CAN-20266: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-26379 ZDI-CAN-20233: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26378 ZDI-CAN-20148: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26376: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26386

Adobe Substance 3D Stager is affected by CVE-2023-26386: an Access of Uninitialized Pointer in 2.0.1 and earlier can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected component is the Stager parsing USDC/file content; impact describe...

CVE-2023-26378: Out-of-bounds Read

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

PT-2023-6618

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager version 2.0.1 and earlier Description The issue is related to an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2023-6608

Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4.8 and earlier Description The issue is related to an out-of-bounds read vulnerability in Adobe Dimension, which could lead to the disclosure of sensitive memory. An attacker could leverage this vulnerability to...

PT-2023-6362

Name of the Vulnerable Software and Affected Versions Adobe Substance 3D Stager versions 2.0.1 and earlier Description The issue is related to an out-of-bounds read vulnerability in the memory, which could allow an attacker to disclose sensitive information by using a specially crafted file. This...

PT-2023-6609

Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4.8 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

PT-2023-6611

Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4.8 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

PT-2023-6617

Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4.8 and earlier Description The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...