CVE-2023-25892 ZDI-CAN-19523: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2023-25894 ZDI-CAN-19543: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26330 ZDI-CAN-20146: Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26355 ZDI-CAN-19512: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26332

CVE-2023-26332 affects Adobe Dimension up to version 3.4.7, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires a user to open a crafted file. A fix is available in Dimension 3.4.8 (per APSB23-20); update is recommended. Multiple references (NVD, CVE records...

CVE-2023-26351 ZDI-CAN-19507: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-26335 ZDI-CAN-20215: Adobe Dimension USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2023-25898

Summary (CVE-2023-25898) : Adobe Dimension

CVE-2023-25887

CVE-2023-25887 – Adobe Dimension : Affected: Dimension 3.4.7 and earlier. Vulnerability: out-of-bounds read while parsing a crafted file, could allow code execution in the caller’s context. Requirements: user interaction (victim must open a malicious file). Implications: successful exploitation c...

CVE-2023-26340

CVE-2023-26340 affects Adobe Dimension up to version 3.4.7. A vulnerability in parsing OBJ-related input leads to an out-of-bounds read, causing potential disclosure of memory and enabling bypass of mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file)....

CVE-2023-26328

CVE-2023-26328 affects Adobe Dimension

CVE-2023-26343 ZDI-CAN-19465: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2023-25903 Adobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution

Adobe Dimension versions 3.4.7 and earlier is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-25901 ZDI-CAN-19508: Adobe Dimension USD File Improper Input Validation Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.7 and earlier is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-26329

Adobe Dimension versions 3.4.7 and earlier are affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). A fix is available in 3.4.8 per APSB23-20/NCSc advisory; update to mitigate.

CVE-2023-25896

Adobe Dimension 3.x (3.4.7 and earlier) is affected by a Use-After-Free vulnerability in the USD file parsing path that could allow arbitrary code execution in the context of the current user when a victim opens a crafted file. Exploitation requires user interaction. Remediation: update to Dimens...

CVE-2023-26341

Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds read that can disclose memory contents and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected product: Adobe Dimension (Windows/macOS) with 3.4.7 and earlier. Root cause: ou...

CVE-2023-26343

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). A fixed release is 3.4.8; advisories (APSB23-20) describe updates to address these vulnerabilities. Connected source...

CVE-2023-25885

CVE-2023-25885 affects Adobe Dimension ≤ 3.4.7 and is described as a Heap-based Buffer Overflow leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). Multiple sources (NVD/NCSC/NASL) corroborate the vuln...

CVE-2023-25903 Adobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution

Adobe Dimension versions 3.4.7 and earlier is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...