CVE-2021-44182: low-severity vulnerability in Adobe Dimension
Adobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 1.8%
Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Adobe · DimensionRelated CVEs — Adobe Dimension
In the same product, most dangerous first.
CVE-2021-28595HIGHAdobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionEPSS 3.8%CVE-2021-44181HIGHAdobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 3.2%CVE-2021-44180HIGHAdobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 3.2%CVE-2021-44179HIGHAdobe Dimension GIF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.1%CVE-2021-43763LOWAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.8%CVE-2021-44183LOWAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.6%