CVE-2023-25906

Adobe Dimension

CVE-2023-26330

Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction (victim must open a crafted file). The issue is addressed in D...

CVE-2021-44179

Adobe Dimension: CVE-2021-44179 is a memory corruption vulnerability in versions 3.4.3 and earlier caused by insecure handling of a malicious GIF file, allowing arbitrary code execution under the current user. Exploitation requires user interaction (e.g., opening a malicious GIF). The issue is re...

CVE-2021-44182

Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds read vulnerability in SVG parsing (CVE-2021-44182) that can disclose memory; exploitation requires user interaction (open a malicious SVG). Remaining formally supported by multiple sources (NVD description, ZDI advisory)....

CVE-2023-25889

Summary (CVE-2023-25889) : Adobe Dimension up to 3.4.7 contains an out-of-bounds read when parsing a crafted file, which can lead to code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected: Adobe Dimension 3.4.7 and earlier. Impact : high ...

CVE-2023-25898

Summary (CVE-2023-25898) : Adobe Dimension

CVE-2023-26341

Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds read that can disclose memory contents and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected product: Adobe Dimension (Windows/macOS) with 3.4.7 and earlier. Root cause: ou...

CVE-2023-26376

CVE-2023-26376 affects Adobe Dimension 3.4.8 and earlier and is an out-of-bounds read vulnerability that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented across multiple sources (NVD/NCSC/Nessus) ...

CVE-2023-26332

CVE-2023-26332 affects Adobe Dimension up to version 3.4.7, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires a user to open a crafted file. A fix is available in Dimension 3.4.8 (per APSB23-20); update is recommended. Multiple references (NVD, CVE records...

CVE-2023-26337

CVE-2023-26337 is a stack-based buffer overflow in Adobe Dimension ≤ 3.4.7 that allows arbitrary code execution in the context of the current user. Exploitation requires a user to open a crafted file (social/interaction). Public sources confirm the flaw affects Dimension 3.4.7 and earlier. Adobe ...

CVE-2023-26350

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read that can disclose sensitive memory and, per the sources, may bypass ASLR. Exploitation requires user interaction (victim opens a crafted file). A fix is available: Adobe APSB23-20, updating Dimension to 3.4.8 (NCSC confirms 3...

CVE-2023-26353

Adobe Dimension before 3.4.8 is affected by an out-of-bounds read vulnerability in USD file parsing that could disclose sensitive memory and bypass mitigations such as ASLR. Exploitation requires a victim to open a malicious file (user interaction). No in-the-wild exploitation is documented in th...

CVE-2023-26374

Adobe Dimension 3.4.8 and earlier is affected by an out-of-bounds read vulnerability (CVE-2023-26374) that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). The issue is documented across multiple sources (NVD/NCSC/CNVD/CVEL...

CVE-2021-44183

Adobe Dimension

CVE-2023-25899

Adobe Dimension 3.4.7 and earlier is affected by a Use-After-Free vulnerability in USD file parsing (CVE-2023-25899) that can enable arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction (opening a crafted file). The is...

CVE-2023-26375

Adobe Dimension CVE-2023-26375 is an out-of-bounds read vulnerability affecting Dimension 3.4.8 and earlier that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). This CVE is corroborated by multiple sources (NVD/C...

CVE-2023-25902

Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds read when parsing a crafted file, which could allow code execution in the user’s context. Exploitation requires the victim to open a malicious file, making it a user-interaction–driven local vulnerability. The issue is documented u...

CVE-2023-26338

The CVE-2023-26338 entry applies to Adobe Dimension versions up to 3.4.7, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Public references describe the issue across multiple sources (NVD/NCSC/Adobe APSB23-20) an...

CVE-2023-26354

Adobe Dimension 3.4.7 and earlier is affected by CVE-2023-26354, an out-of-bounds read in USD file parsing that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (opening a malicious file). Publicly documented impact is memory disclosure with a loca...

CVE-2024-34124

CVE-2024-34124 affects Adobe Dimension up to version 3.4.11 (and earlier) with an out-of-bounds write that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Remediation per APSB24-47: update to a fixed version...

CVE-2022-38444

CVE-2022-38444 affects Adobe Dimension 3.4.5 and is a Use-After-Free vulnerability in the SKP file parsing path that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a crafted file). The issue is addressed in the Dim...

CVE-2023-25897

CVE-2023-25897 corresponds to a heap-based buffer overflow in Adobe Dimension’s USD/file parsing path, allowing arbitrary code execution in the context of the current user. Affected product: Adobe Dimension 3.4.7 and earlier. Root cause: heap-based overflow triggered when parsing crafted USD file...

CVE-2023-38212

CVE-2023-38212 affects Adobe Dimension 3.4.9, with a heap-based buffer overflow in GLB/file parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Public sources corroborate this as part of APSB...

CVE-2024-34125

Adobe Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires a victim to open a malicious file (user interaction). The issue is documented as CVE-2024-34125 with remediation guidance pointing to upd...

CVE-2024-41865

Adobe Dimension 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability (CVE-2024-41865) that could allow arbitrary code execution if a malicious file is found along the executable search path. Exploitation requires user interaction. Multiple connected advisories indicate this i...

CVE-2021-44181

Adobe Dimension

CVE-2023-26342

Adobe Dimension up to version 3.4.7 is affected by a GLB file-parsing out-of-bounds read vulnerability (CVE-2023-26342) that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Updates to 3.4.8 are available and fixed per APSB23-20 and NCSC advisor...

CVE-2023-26404

CVE-2023-26404 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the user to open a malicious file. Mitigation is to update to Dimension 3.4.9 as part of APSB23-27; the issue is documented acro...

CVE-2023-26333

CVE-2023-26333 – Adobe Dimension is affected in versions 3.4.7 and earlier by an out-of-bounds read when parsing a crafted file, which can lead to code execution under the user’s context. Exploitation requires user interaction (victim opens a malicious file). Connected sources corroborate this vu...

CVE-2024-34126

Adobe Dimension is affected by CVE-2024-34126: an out-of-bounds read in Dimension ≤3.4.11 can disclose memory and bypass ASLR; exploitation requires a user to open a malicious file (local vector, UI:R). Remediation: update to a version later than 3.4.11 as per APSB24-47; multiple sources confirm ...

CVE-2023-25903

Summary: CVE-2023-25903 affects Adobe Dimension up to version 3.4.7. The issue is an Integer Overflow/Wraparound in USDZ handling that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Impact: arbitrary...

CVE-2023-26331

Adobe Dimension (versions 3.4.7 and earlier) is affected by an out-of-bounds read vulnerability in file parsing that can disclose memory and potentially bypass mitigations like ASLR. Exploitation requires a user to open a malicious file, making it a user-interaction–driven issue. Public sources c...

CVE-2023-26334

CVE-2023-26334 affects Adobe Dimension 3.4.7 and earlier, with an uninitialized pointer access vulnerability that can lead to arbitrary code execution in the current user’s context. Exploitation requires the victim to open a malicious file (user interaction). The issue is documented in NVD and li...

CVE-2023-26340

CVE-2023-26340 affects Adobe Dimension up to version 3.4.7. A vulnerability in parsing OBJ-related input leads to an out-of-bounds read, causing potential disclosure of memory and enabling bypass of mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file)....

CVE-2021-28595

Adobe Dimension 3.4 and earlier are affected by an Uncontrolled Search Path Element vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is addressed in APSB21-40 with a patch likel...

CVE-2023-26372

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds write vulnerability that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented as CVE-2023-26372. Remediation is...

CVE-2023-26378

Adobe Dimension 3.4.8 (and earlier) is affected by an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the victim to open a malicious file. The issue is confirmed across multiple sources (NVD/NCSC/ZDI) and a fix was released to 3.4.9 via APSB2...

CVE-2024-45146

Adobe Dimension (versions 4.0.3 and earlier) is affected by a Use-After-Free vulnerability (CVE-2024-45146) that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. A patch is available via APSB24-74; update to Dimensio...

CVE-2023-26339

Adobe Dimension has a confirmed out-of-bounds read vulnerability affecting version 3.4.7 and earlier (CVE-2023-26339). The issue occurs during OBJ/file parsing and can lead to disclosure of sensitive memory; exploitation requires user interaction (victim opens a malicious file). A fix is availabl...

CVE-2023-38213

Adobe Dimension 3.4.9 is affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. Remediation per the provided advisories is to update to a fixed version (Adobe Dimension 3.4.10 or later) as detailed in APSB...

CVE-2024-20790

CVE-2024-20790 relates to Adobe Dimension versions 3.4.11 and earlier, which have an out-of-bounds read vulnerability that can disclose sensitive memory and may bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user-interaction prerequisite. Public d...

CVE-2023-26371

Adobe Dimension: CVE-2023-26371 describes an out-of-bounds read when parsing crafted files, enabling code execution in the caller’s context. Affected product: Adobe Dimension versions up to 3.4.8. Exploitation requires user interaction (victim must open a malicious file). Remediation per APSB23-2...

CVE-2023-26373

Adobe Dimension 3.4.8 and earlier is vulnerable to an out-of-bounds write that can lead to arbitrary code execution in the current user context. Exploitation requires that the user opens a malicious file (user interaction). Connected sources corroborate the issue and indicate a fix is available: ...

CVE-2024-20789

Adobe Dimension versions 3.4.11 and earlier are affected by a Use-After-Free in SKP file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Connected sources confirm the CVE-2024-20789 issue and reference ...

CVE-2024-45150

Summary (CVE-2024-45150): Adobe Dimension prior to and including 4.0.3 contains an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to interact with a malicious file opened by the user. Affected versio...

CVE-2023-26343

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). A fixed release is 3.4.8; advisories (APSB23-20) describe updates to address these vulnerabilities. Connected source...

CVE-2023-26352

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read in USD file parsing that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file) and is described as enabling information disclosure with high confidentiality impact; attack vector...

CVE-2023-26380

Summary: CVE-2023-26380 affects Adobe Dimension 3.4.8 and earlier and is described as an out-of-bounds read vulnerability that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, indicating a user interaction requirement. Affe...

CVE-2023-26382

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds read vulnerability (CVE-2023-26382) that could disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Multiple sources (NVD/NCSC/APS B23-27) confirm the issue and refe...

CVE-2023-26400

CVE-2023-26400 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Official remediation is the security update to Dimension 3.4.9 (APSB23-27); no further details are...