CVE-2023-25890 ZDI-CAN-19493: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25883 ZDI-CAN-19386: Adobe Dimension FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26346 ZDI-CAN-19495: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-25894 ZDI-CAN-19543: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26335

Summary (CVE-2023-26335) Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds read when parsing a crafted file, enabling code execution in the user’s context. The vulnerability requires user interaction (victim must open a malicious file) and stems from out-of-bounds access in parsin...

CVE-2023-26334

CVE-2023-26334 affects Adobe Dimension 3.4.7 and earlier, with an uninitialized pointer access vulnerability that can lead to arbitrary code execution in the current user’s context. Exploitation requires the victim to open a malicious file (user interaction). The issue is documented in NVD and li...

CVE-2023-26329 ZDI-CAN-20213: Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26343 ZDI-CAN-19465: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-25890

CVE-2023-25890 : Adobe Dimension 3.4.7 and earlier is affected by a heap-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file. The issue is addressed in the APSB23-20 advi...

CVE-2023-26338

The CVE-2023-26338 entry applies to Adobe Dimension versions up to 3.4.7, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Public references describe the issue across multiple sources (NVD/NCSC/Adobe APSB23-20) an...

CVE-2023-26327

CVE-2023-26327 affects Adobe Dimension up to version 3.4.7 (and earlier). The issue is an out-of-bounds read that can disclose sensitive memory and potentially bypass mitigations like ASLR; exploitation requires a user to open a crafted file. Expected impact is memory disclosure and code executio...

CVE-2023-26348

Adobe Dimension has an out-of-bounds read vulnerability in USD file parsing affecting version 3.4.7 and earlier, potentially allowing memory disclosure and ASLR bypass. Exploitation requires user interaction (victim opens a malicious file). A fixed version is 3.4.8; apply the vendor update (APSB2...

CVE-2023-25881

Adobe Dimension 3.4.7 and earlier is affected by an Improper Input Validation vulnerability leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). A patch to 3.4.8 is available, and advisories confirm updates address...

CVE-2023-26331

Adobe Dimension (versions 3.4.7 and earlier) is affected by an out-of-bounds read vulnerability in file parsing that can disclose memory and potentially bypass mitigations like ASLR. Exploitation requires a user to open a malicious file, making it a user-interaction–driven issue. Public sources c...

CVE-2023-25907

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read when parsing a crafted file, enabling potential code execution in the user’s context. The issue requires user interaction (victim opens malicious file). Affected product/version: Dimension 3.4.7 (and earlier). Root cause: out...

CVE-2023-26337

CVE-2023-26337 is a stack-based buffer overflow in Adobe Dimension ≤ 3.4.7 that allows arbitrary code execution in the context of the current user. Exploitation requires a user to open a crafted file (social/interaction). Public sources confirm the flaw affects Dimension 3.4.7 and earlier. Adobe ...

CVE-2023-25888 ZDI-CAN-19451: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2023-25889

Summary (CVE-2023-25889) : Adobe Dimension up to 3.4.7 contains an out-of-bounds read when parsing a crafted file, which can lead to code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected: Adobe Dimension 3.4.7 and earlier. Impact : high ...

CVE-2023-25903

Summary: CVE-2023-25903 affects Adobe Dimension up to version 3.4.7. The issue is an Integer Overflow/Wraparound in USDZ handling that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Impact: arbitrary...

CVE-2023-25879

Adobe Dimension 3.4.7 and earlier are affected by an Improper Input Validation vulnerability that can allow arbitrary code execution in the context of the current user when a victim opens a crafted file. The issue requires user interaction and is described as a local-execution type concern with h...