CVE-2023-26344: fallo de gravedad media en Adobe Dimension
ZDI-CAN-19467: Adobe Dimension USD File Access of Uninitialized Pointer Information Disclosure Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5epss 0.3%
Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
Adobe · DimensionCVEs relacionadas — Adobe Dimension
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-28595HIGHAdobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionEPSS 3.8%CVE-2021-44181HIGHAdobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 3.2%CVE-2021-44180HIGHAdobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 3.2%CVE-2021-44179HIGHAdobe Dimension GIF File Parsing Memory Corruption Remote Code Execution VulnerabilityEPSS 3.1%CVE-2021-44182LOWAdobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.8%CVE-2021-43763LOWAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 1.8%