Adobe Dimension

Dimension <=4.1.4 OOB Read in file parser, possible code exec
CVE-2025-61798 7.8 - High - October 14, 2025

Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Dimension <4.1.4: OOB Read in File Parser Enabling Code Exec
CVE-2025-61799 7.8 - High - October 14, 2025

Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Dimension <4.1.4: Integer Overflow Arbitrary Code Exec
CVE-2025-61800 7.8 - High - October 14, 2025

Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Integer Overflow or Wraparound

UseAfterFree in Dimension v4.1.4 and earlier
CVE-2025-61801 7.8 - High - October 14, 2025

Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Dimension <4.1.3 OOB Read Memory Disclosure
CVE-2025-54238 5.5 - Medium - August 12, 2025

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Out-of-Bounds Write in Dimension <4.1.2 Leading to Arbitrary Code Exec
CVE-2025-30312 7.8 - High - July 08, 2025

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Dimension <=4.1.2 OOB Read (CVE-2025-47135)
CVE-2025-47135 5.5 - Medium - July 08, 2025

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Dimension <4.1.3 OoB Write -> Arbitrary Code Exec
CVE-2025-43548 7.8 - High - May 13, 2025

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Dimension <=4.1.2 OOBW Exec via Malicious File (CVE-2025-43572)
CVE-2025-43572 7.8 - High - May 13, 2025

Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Dimension <=4.0.3 UA_Free -> Arbitrary Code Exec (CVE-2024-45146)
CVE-2024-45146 7.8 - High - October 09, 2024

Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Dim <4.0.3 OOBWrite in FileParser Allows Code Exec
CVE-2024-45150 7.8 - High - October 09, 2024

Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Dimension 3.4.11 OOB Write Arbitrary Code Exec via Malicious File
CVE-2024-34124 7.8 - High - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Dimension Untrusted Search Path (<3.4.11) Arbitrary Code Exec
CVE-2024-41865 7.8 - High - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction.

Untrusted Path

Use After Free in Dimension 3.4.11 & Earlier -> Arbitrary Code Execution
CVE-2024-20789 7.8 - High - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Dimension <=3.4.11 OOB read vulnerability enabling ASLR bypass
CVE-2024-34125 5.5 - Medium - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Dimension 3.4.11 OOB Read Disclosure via Malicious File
CVE-2024-34126 5.5 - Medium - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Dimension < 3.4.11 OoB Read may expose memory
CVE-2024-20790 5.5 - Medium - August 14, 2024

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.10-<3.4.10 OOB Read Vulnerability (ASLR Bypass)
CVE-2023-47079 5.5 - Medium - December 13, 2023

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

ADOBE DIMENSION <3.4.10 OOB Read ASLR Bypass via Malicious File
CVE-2023-47078 5.5 - Medium - December 13, 2023

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension (3.4.10): OOB Read & ASLR Bypass via Malicious File
CVE-2023-47062 5.5 - Medium - December 13, 2023

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension OOB Memory Read (3.4.10) via Malicious File
CVE-2023-47061 5.5 - Medium - December 13, 2023

Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension OOB Read in <3.4.9 Leading to Data Disclosure
CVE-2023-44326 5.5 - Medium - November 17, 2023

Adobe Dimension versions 3.4.9 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Dimension 3.4.9 UAF for Code Exec via Malicious File
CVE-2023-38211 7.8 - High - August 09, 2023

Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Adobe Dimension OOB Read v3.4.9 Allows Memory Disclosure
CVE-2023-38213 5.5 - Medium - August 09, 2023

Adobe Dimension version 3.4.9 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.9 Heap BF Buffer Overflow Arbitrary Code Exec
CVE-2023-38212 7.8 - High - August 09, 2023

Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Adobe Dimension 3.4.8 OOB Read in File Parser
CVE-2023-26371 7.8 - High - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <3.4.8 OOB Write Arbitrary Code (user file)
CVE-2023-26372 7.8 - High - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Dimension 3.x OOB Read Disclosure via Malicious File
CVE-2023-26374 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read Discloses Memory Data
CVE-2023-26375 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read CVE-2023-26376
CVE-2023-26376 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read Disclosure
CVE-2023-26377 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read allows ASLR Bypass
CVE-2023-26378 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <3.4.8 OOB Read Vulnerability (ASLR Bypass)
CVE-2023-26379 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read Memory Disclosure Attack
CVE-2023-26380 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <3.4.8: OOB Read Sensitive Data Disclosure
CVE-2023-26381 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

OOB Read in Adobe Dim 3.4.8 (before 3.4.9)
CVE-2023-26382 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <=3.4.8: Out-of-Bounds Read Exposes Memory via Malicious File
CVE-2023-26400 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read Disclosure (ASLR Bypass)
CVE-2023-26401 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.8 OOB Read (CVE-2023-26404)
CVE-2023-26404 5.5 - Medium - April 12, 2023

Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.7 OOB Read CVE-2023-25900 Exec via Malicious File
CVE-2023-25900 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension OOB Read CVE-2023-25907 (<3.4.8)
CVE-2023-25907 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Out-of-Bounds Read in Adobe Dimension <3.4.7 (CVE-2023-26341)
CVE-2023-26341 5.5 - Medium - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension 3.4.7 OOB Read Code Exec
CVE-2023-25906 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <=3.4.7 OOB Write Arbitrary Code Exec
CVE-2023-25905 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Dimension 3.4.7 OOB Read in File Parser Code Execution
CVE-2023-25904 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <3.4.7 OOB Read CVE-2023-25902
CVE-2023-25902 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Dimension <3.4.7 Improper Input Validation Enables Arbitrary Code Exec
CVE-2023-25901 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Improper Input Validation

Adobe Dim.: 3.4.7 Heap-Overflow, Arbitrary Code Exec (User Interaction)
CVE-2023-25895 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Dimension <3.5: UAF vulnerability causing ACE via malicious file
CVE-2023-25896 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Adobe Dimension 3.4.7: Heap Buffer Overflow via Malicious File
CVE-2023-25897 7.8 - High - March 28, 2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption