Adobe Dimension vulnerabilities

CVE-2021-44180 [HIGH] CWE-787 CVE-2021-44180: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability th Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

CVE-2021-44181 [HIGH] CWE-787 CVE-2021-44181: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability th Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

CVE-2025-61801 [HIGH] CWE-416 CVE-2025-61801: Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could resul Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-61800 [HIGH] CWE-190 CVE-2025-61800: Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-28595 [HIGH] CWE-427 CVE-2021-28595: Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-20789 [HIGH] CWE-416 CVE-2024-20789: Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could resu Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45146 [HIGH] CWE-416 CVE-2024-45146: Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could resul Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-34124 [HIGH] CWE-787 CVE-2024-34124: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that coul Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2024-45150 [HIGH] CWE-787 CVE-2024-45150: Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-43548 [HIGH] CWE-787 CVE-2025-43548: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-43572 [HIGH] CWE-787 CVE-2025-43572: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30312 [HIGH] CWE-787 CVE-2025-30312: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-44179 [HIGH] CWE-788 CVE-2021-44179: Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2025-61799 [HIGH] CWE-125 CVE-2025-61799: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsin Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that

CVE-2025-61798 [HIGH] CWE-125 CVE-2025-61798: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsin Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that

CVE-2024-41865 [HIGH] CWE-426 CVE-2024-41865: Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that co Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search

CVE-2023-25905 [HIGH] CWE-787 CVE-2023-25905: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability tha Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-26328 [HIGH] CWE-787 CVE-2023-26328: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability tha Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-25880 [HIGH] CWE-787 CVE-2023-25880: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability tha Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-26330 [HIGH] CWE-787 CVE-2023-26330: Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability tha Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.