CVE-2023-26397

CVE-2023-26397 affects Adobe Acrobat Reader versions 23.001.20093 and 20.005.30441 (and earlier). The issue is an out-of-bounds read in a component that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires user interaction—an attacker must lure a user to open...

CVE-2023-26403

Adobe Substance 3D Stager is affected by an out-of-bounds read in USD file parsing for version 2.0.1 and earlier, leading to possible information disclosure. The CVE entry notes that exploitation requires a user to open a malicious file (UI: REQUIRED) and could bypass mitigations like ASLR. Sever...

CVE-2023-26378 ZDI-CAN-20148: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26382 ZDI-CAN-20156: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26374 ZDI-CAN-20045: Adobe Dimension USD File Parsing Out-Of-Bounds Read Memory leak Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26401 ZDI-CAN-20278: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26380

Summary: CVE-2023-26380 affects Adobe Dimension 3.4.8 and earlier and is described as an out-of-bounds read vulnerability that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, indicating a user interaction requirement. Affe...

CVE-2023-26404

CVE-2023-26404 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the user to open a malicious file. Mitigation is to update to Dimension 3.4.9 as part of APSB23-27; the issue is documented acro...

CVE-2023-26376 ZDI-CAN-20155: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26376

CVE-2023-26376 affects Adobe Dimension 3.4.8 and earlier and is an out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented across multiple sources (NVD/NCSC/Nessus) ...

CVE-2023-26377 ZDI-CAN-20151: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26386 ZDI-CAN-20266: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-26387 ZDI-CAN-20265: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Substance 3D Stager version 2.0.1 and earlier is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-26381

Adobe Dimension is affected by CVE-2023-26381 (out-of-bounds read) in version 3.4.8 and earlier, enabling disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Multiple sources (NVD, ZDI, CVE List, NCSC) corroborate th...

CVE-2023-26400

CVE-2023-26400 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Official remediation is the security update to Dimension 3.4.9 (APSB23-27); no further details are...

CVE-2023-26374

Adobe Dimension 3.4.8 and earlier is affected by an out-of-bounds read vulnerability (CVE-2023-26374) that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). The issue is documented across multiple sources (NVD/NCSC/CNVD/CVEL...

CVE-2023-26377

Adobe Dimension

CVE-2023-26382

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds read vulnerability (CVE-2023-26382) that could disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Multiple sources (NVD/NCSC/APS B23-27) confirm the issue and refe...

CVE-2023-26401

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds read that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires a user to open a malicious file. A fix is available in Dimension 3.4.9 (per APSB23-27); update to mitigate.

CVE-2023-26379 ZDI-CAN-20233: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...