Adobe Dimension vulnerabilities

116 known vulnerabilities affecting adobe/dimension.

Total CVEs
116
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH69MEDIUM44LOW3

Vulnerabilities

Page 1 of 6
CVE-2025-61800HIGHCVSS 7.8fixed in 4.1.5≤ 4.1.42025-10-14
CVE-2025-61800 [HIGH] CWE-190 CVE-2025-61800: Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability Dimension versions 4.1.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-61799HIGHCVSS 7.8fixed in 4.1.5≤ 4.1.42025-10-14
CVE-2025-61799 [HIGH] CWE-125 CVE-2025-61799: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsin Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that
cvelistv5nvd
CVE-2025-61798HIGHCVSS 7.8fixed in 4.1.5≤ 4.1.42025-10-14
CVE-2025-61798 [HIGH] CWE-125 CVE-2025-61798: Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsin Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that
cvelistv5nvd
CVE-2025-61801HIGHCVSS 7.8fixed in 4.1.5≤ 4.1.42025-10-14
CVE-2025-61801 [HIGH] CWE-416 CVE-2025-61801: Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could resul Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-54238MEDIUMCVSS 5.5fixed in 4.1.4≤ 4.1.32025-08-12
CVE-2025-54238 [MEDIUM] CWE-125 CVE-2025-54238: Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-30312HIGHCVSS 7.8fixed in 4.1.3≤ 4.1.22025-07-08
CVE-2025-30312 [HIGH] CWE-787 CVE-2025-30312: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-47135MEDIUMCVSS 5.5fixed in 4.1.3≤ 4.1.22025-07-08
CVE-2025-47135 [MEDIUM] CWE-125 CVE-2025-47135: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-43572HIGHCVSS 7.8fixed in 4.1.2≤ 4.1.22025-05-13
CVE-2025-43572 [HIGH] CWE-787 CVE-2025-43572: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2025-43548HIGHCVSS 7.8fixed in 4.1.2≤ 4.1.22025-05-13
CVE-2025-43548 [HIGH] CWE-787 CVE-2025-43548: Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-45146HIGHCVSS 7.8fixed in 4.0.4≤ 4.0.32024-10-09
CVE-2024-45146 [HIGH] CWE-416 CVE-2024-45146: Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could resul Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-45150HIGHCVSS 7.8fixed in 4.0.4≤ 4.0.32024-10-09
CVE-2024-45150 [HIGH] CWE-787 CVE-2024-45150: Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-34124HIGHCVSS 7.8≤ 3.4.112024-08-14
CVE-2024-34124 [HIGH] CWE-787 CVE-2024-34124: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that coul Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-41865HIGHCVSS 7.8≤ 3.4.112024-08-14
CVE-2024-41865 [HIGH] CWE-426 CVE-2024-41865: Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that co Dimension versions 3.4.11 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur if the application uses a search
cvelistv5nvd
CVE-2024-20789HIGHCVSS 7.8≤ 3.4.112024-08-14
CVE-2024-20789 [HIGH] CWE-416 CVE-2024-20789: Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could resu Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-34126MEDIUMCVSS 5.5≤ 3.4.112024-08-14
CVE-2024-34126 [MEDIUM] CWE-125 CVE-2024-34126: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-34125MEDIUMCVSS 5.5≤ 3.4.112024-08-14
CVE-2024-34125 [MEDIUM] CWE-125 CVE-2024-34125: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2024-20790MEDIUMCVSS 5.5≤ 3.4.112024-08-14
CVE-2024-20790 [MEDIUM] CWE-125 CVE-2024-20790: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2023-47079MEDIUMCVSS 5.5fixed in 3.4.11≤ 3.4.102023-12-13
CVE-2023-47079 [MEDIUM] CWE-125 CVE-2023-47079: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2023-47078MEDIUMCVSS 5.5fixed in 3.4.11≤ 3.4.102023-12-13
CVE-2023-47078 [MEDIUM] CWE-125 CVE-2023-47078: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2023-47061MEDIUMCVSS 5.5fixed in 3.4.11≤ 3.4.102023-12-13
CVE-2023-47061 [MEDIUM] CWE-125 CVE-2023-47061: Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd