CVE-2022-38448

Adobe Dimension 3.4.5 is affected by a Use After Free vulnerability in SKP file parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Mitigation: update to 3.4.6 or later (per APSB22-57) or apply vendor-rel...

CVE-2023-25894

CVE-2023-25894 affects Adobe Dimension 3.4.7 and earlier, where a Use-After-Free in USD file parsing can lead to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). Public references and related entries confirm...

CVE-2023-25899

Adobe Dimension 3.4.7 and earlier is affected by a Use-After-Free vulnerability in USD file parsing (CVE-2023-25899) that can enable arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction (opening a crafted file). The is...

CVE-2023-26341

Adobe Dimension 3.4.7 and earlier is affected by an out-of-bounds read that can disclose memory contents and bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected product: Adobe Dimension (Windows/macOS) with 3.4.7 and earlier. Root cause: ou...

CVE-2023-38211

CVE-2023-38211 affects Adobe Dimension 3.4.9 and is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). Several connected sources corroborate the issue as a post-...

CVE-2021-43763

Adobe Dimension 3.4.3 and earlier contains an out-of-bounds read (TIF parsing) that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (open a malicious TIF). Remediation: apply the APSB21-116 update (upgrade to 3.4.4 or later) per Adobe advisory.

CVE-2023-26328

CVE-2023-26328 affects Adobe Dimension

CVE-2023-26348

Adobe Dimension has an out-of-bounds read vulnerability in USD file parsing affecting version 3.4.7 and earlier, potentially allowing memory disclosure and ASLR bypass. Exploitation requires user interaction (victim opens a malicious file). A fixed version is 3.4.8; apply the vendor update (APSB2...

CVE-2021-44179

Adobe Dimension: CVE-2021-44179 is a memory corruption vulnerability in versions 3.4.3 and earlier caused by insecure handling of a malicious GIF file, allowing arbitrary code execution under the current user. Exploitation requires user interaction (e.g., opening a malicious GIF). The issue is re...

CVE-2022-38440

CVE-2022-38440 affects Adobe Dimension 3.4.5, with an out-of-bounds read during parsing of a crafted file that could allow code execution in the caller’s context. Exploitation requires user interaction (victim must open a malicious file). The issue is addressed in a subsequent update (3.4.6+; APS...

CVE-2023-25898

Summary (CVE-2023-25898) : Adobe Dimension

CVE-2023-26350

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read that can disclose sensitive memory and, per the sources, may bypass ASLR. Exploitation requires user interaction (victim opens a crafted file). A fix is available: Adobe APSB23-20, updating Dimension to 3.4.8 (NCSC confirms 3...

CVE-2023-26374

Adobe Dimension 3.4.8 and earlier is affected by an out-of-bounds read vulnerability (CVE-2023-26374) that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). The issue is documented across multiple sources (NVD/NCSC/CNVD/CVEL...

CVE-2023-25889

Summary (CVE-2023-25889) : Adobe Dimension up to 3.4.7 contains an out-of-bounds read when parsing a crafted file, which can lead to code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected: Adobe Dimension 3.4.7 and earlier. Impact : high ...

CVE-2023-26337

CVE-2023-26337 is a stack-based buffer overflow in Adobe Dimension ≤ 3.4.7 that allows arbitrary code execution in the context of the current user. Exploitation requires a user to open a crafted file (social/interaction). Public sources confirm the flaw affects Dimension 3.4.7 and earlier. Adobe ...

CVE-2023-26342

Adobe Dimension up to version 3.4.7 is affected by a GLB file-parsing out-of-bounds read vulnerability (CVE-2023-26342) that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Updates to 3.4.8 are available and fixed per APSB23-20 and NCSC advisor...

CVE-2023-26375

Adobe Dimension CVE-2023-26375 is an out-of-bounds read vulnerability affecting Dimension 3.4.8 and earlier that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). This CVE is corroborated by multiple sources (NVD/C...

CVE-2023-26340

CVE-2023-26340 affects Adobe Dimension up to version 3.4.7. A vulnerability in parsing OBJ-related input leads to an out-of-bounds read, causing potential disclosure of memory and enabling bypass of mitigations like ASLR. Exploitation requires user interaction (victim must open a malicious file)....

CVE-2023-26372

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds write vulnerability that can allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The issue is documented as CVE-2023-26372. Remediation is...

CVE-2023-38212

CVE-2023-38212 affects Adobe Dimension 3.4.9, with a heap-based buffer overflow in GLB/file parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Public sources corroborate this as part of APSB...

CVE-2024-45146

Adobe Dimension (versions 4.0.3 and earlier) is affected by a Use-After-Free vulnerability (CVE-2024-45146) that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. A patch is available via APSB24-74; update to Dimensio...

CVE-2021-44182

Adobe Dimension versions 3.4.3 and earlier are affected by an out-of-bounds read vulnerability in SVG parsing (CVE-2021-44182) that can disclose memory; exploitation requires user interaction (open a malicious SVG). Remaining formally supported by multiple sources (NVD description, ZDI advisory)....

CVE-2023-25903

Summary: CVE-2023-25903 affects Adobe Dimension up to version 3.4.7. The issue is an Integer Overflow/Wraparound in USDZ handling that can lead to arbitrary code execution in the context of the current user when a malicious file is opened. Exploitation requires user interaction. Impact: arbitrary...

CVE-2023-26354

Adobe Dimension 3.4.7 and earlier is affected by CVE-2023-26354, an out-of-bounds read in USD file parsing that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (opening a malicious file). Publicly documented impact is memory disclosure with a loca...

CVE-2024-34125

Adobe Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires a victim to open a malicious file (user interaction). The issue is documented as CVE-2024-34125 with remediation guidance pointing to upd...

CVE-2022-38444

CVE-2022-38444 affects Adobe Dimension 3.4.5 and is a Use-After-Free vulnerability in the SKP file parsing path that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a crafted file). The issue is addressed in the Dim...

CVE-2023-26338

The CVE-2023-26338 entry applies to Adobe Dimension versions up to 3.4.7, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Public references describe the issue across multiple sources (NVD/NCSC/Adobe APSB23-20) an...

CVE-2024-34124

CVE-2024-34124 affects Adobe Dimension up to version 3.4.11 (and earlier) with an out-of-bounds write that could allow arbitrary code execution in the current user context. Exploitation requires user interaction (victim opens a malicious file). Remediation per APSB24-47: update to a fixed version...

CVE-2024-34126

Adobe Dimension is affected by CVE-2024-34126: an out-of-bounds read in Dimension ≤3.4.11 can disclose memory and bypass ASLR; exploitation requires a user to open a malicious file (local vector, UI:R). Remediation: update to a version later than 3.4.11 as per APSB24-47; multiple sources confirm ...

CVE-2021-28595

Adobe Dimension 3.4 and earlier are affected by an Uncontrolled Search Path Element vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (opening a malicious file). The issue is addressed in APSB21-40 with a patch likel...

CVE-2023-26333

CVE-2023-26333 – Adobe Dimension is affected in versions 3.4.7 and earlier by an out-of-bounds read when parsing a crafted file, which can lead to code execution under the user’s context. Exploitation requires user interaction (victim opens a malicious file). Connected sources corroborate this vu...

CVE-2023-26404

CVE-2023-26404 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the user to open a malicious file. Mitigation is to update to Dimension 3.4.9 as part of APSB23-27; the issue is documented acro...

CVE-2021-44183

Adobe Dimension

CVE-2023-26334

CVE-2023-26334 affects Adobe Dimension 3.4.7 and earlier, with an uninitialized pointer access vulnerability that can lead to arbitrary code execution in the current user’s context. Exploitation requires the victim to open a malicious file (user interaction). The issue is documented in NVD and li...

CVE-2024-41865

Adobe Dimension 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability (CVE-2024-41865) that could allow arbitrary code execution if a malicious file is found along the executable search path. Exploitation requires user interaction. Multiple connected advisories indicate this i...

CVE-2023-26371

Adobe Dimension: CVE-2023-26371 describes an out-of-bounds read when parsing crafted files, enabling code execution in the caller’s context. Affected product: Adobe Dimension versions up to 3.4.8. Exploitation requires user interaction (victim must open a malicious file). Remediation per APSB23-2...

CVE-2023-26378

Adobe Dimension 3.4.8 (and earlier) is affected by an out-of-bounds read in USD file parsing that can disclose memory and bypass ASLR. Exploitation requires the victim to open a malicious file. The issue is confirmed across multiple sources (NVD/NCSC/ZDI) and a fix was released to 3.4.9 via APSB2...

CVE-2023-26382

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds read vulnerability (CVE-2023-26382) that could disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Multiple sources (NVD/NCSC/APS B23-27) confirm the issue and refe...

CVE-2021-44181

Adobe Dimension

CVE-2023-25897

CVE-2023-25897 corresponds to a heap-based buffer overflow in Adobe Dimension’s USD/file parsing path, allowing arbitrary code execution in the context of the current user. Affected product: Adobe Dimension 3.4.7 and earlier. Root cause: heap-based overflow triggered when parsing crafted USD file...

CVE-2023-26339

Adobe Dimension has a confirmed out-of-bounds read vulnerability affecting version 3.4.7 and earlier (CVE-2023-26339). The issue occurs during OBJ/file parsing and can lead to disclosure of sensitive memory; exploitation requires user interaction (victim opens a malicious file). A fix is availabl...

CVE-2023-26343

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). A fixed release is 3.4.8; advisories (APSB23-20) describe updates to address these vulnerabilities. Connected source...

CVE-2023-38213

Adobe Dimension 3.4.9 is affected by an out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. Remediation per the provided advisories is to update to a fixed version (Adobe Dimension 3.4.10 or later) as detailed in APSB...

CVE-2024-20790

CVE-2024-20790 relates to Adobe Dimension versions 3.4.11 and earlier, which have an out-of-bounds read vulnerability that can disclose sensitive memory and may bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user-interaction prerequisite. Public d...

CVE-2025-43548

Adobe Dimension

CVE-2023-26352

Adobe Dimension 3.4.7 and earlier are affected by an out-of-bounds read in USD file parsing that can disclose memory contents. Exploitation requires user interaction (victim opens a malicious file) and is described as enabling information disclosure with high confidentiality impact; attack vector...

CVE-2023-26380

Summary: CVE-2023-26380 affects Adobe Dimension 3.4.8 and earlier and is described as an out-of-bounds read vulnerability that can disclose sensitive memory and bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, indicating a user interaction requirement. Affe...

CVE-2023-26381

Adobe Dimension is affected by CVE-2023-26381 (out-of-bounds read) in version 3.4.8 and earlier, enabling disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). Multiple sources (NVD, ZDI, CVE List, NCSC) corroborate th...

CVE-2023-26400

CVE-2023-26400 affects Adobe Dimension 3.4.8 and earlier, with an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Official remediation is the security update to Dimension 3.4.9 (APSB23-27); no further details are...

CVE-2024-20789

Adobe Dimension versions 3.4.11 and earlier are affected by a Use-After-Free in SKP file parsing that can lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. Connected sources confirm the CVE-2024-20789 issue and reference ...