Adobe Dimension vulnerabilities

116 known vulnerabilities affecting adobe/dimension.

Total CVEs
116
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH69MEDIUM44LOW3

Vulnerabilities

Page 6 of 6
CVE-2022-38447HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38447 [HIGH] CWE-416 CVE-2022-38447: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38448HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38448 [HIGH] CWE-416 CVE-2022-38448: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38441HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38441 [HIGH] CWE-125 CVE-2022-38441: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a cra Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victi
cvelistv5nvd
CVE-2022-38445HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38445 [HIGH] CWE-416 CVE-2022-38445: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38440HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38440 [HIGH] CWE-125 CVE-2022-38440: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a cra Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victi
cvelistv5nvd
CVE-2022-38442HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38442 [HIGH] CWE-416 CVE-2022-38442: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38446HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38446 [HIGH] CWE-416 CVE-2022-38446: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38444HIGHCVSS 7.8fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38444 [HIGH] CWE-416 CVE-2022-38444: Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in ar Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2022-38443MEDIUMCVSS 5.5fixed in 3.4.6≥ unspecified, ≤ 3.4.52022-10-14
CVE-2022-38443 [MEDIUM] CWE-125 CVE-2022-38443: Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd
CVE-2021-44180HIGHCVSS 7.8≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-44180 [HIGH] CWE-787 CVE-2021-44180: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability th Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.
cvelistv5nvd
CVE-2021-44181HIGHCVSS 7.8≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-44181 [HIGH] CWE-787 CVE-2021-44181: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability th Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.
cvelistv5nvd
CVE-2021-44179HIGHCVSS 7.8≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-44179 [HIGH] CWE-788 CVE-2021-44179: Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to Adobe Dimension versions 3.4.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
cvelistv5nvd
CVE-2021-44183LOWCVSS 3.3≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-44183 [LOW] CWE-125 CVE-2021-44183: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability tha Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file.
cvelistv5nvd
CVE-2021-44182LOWCVSS 3.3≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-44182 [LOW] CWE-125 CVE-2021-44182: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability tha Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file.
cvelistv5nvd
CVE-2021-43763LOWCVSS 3.3≤ 3.4.3≥ unspecified, ≤ 3.4.32021-12-20
CVE-2021-43763 [LOW] CWE-125 CVE-2021-43763: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability tha Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file.
cvelistv5nvd
CVE-2021-28595HIGHCVSS 7.8≤ 3.4≥ unspecified, ≤ 3.42021-08-20
CVE-2021-28595 [HIGH] CWE-427 CVE-2021-28595: Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
cvelistv5nvd