CVE-2022-38440: Adobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38440?
CVE-2022-38440 has been rated as high severity due to its potential for code execution via out-of-bounds read.
How do I fix CVE-2022-38440?
To fix CVE-2022-38440, upgrade Adobe Dimension to version 3.4.6 or later.
What version of Adobe Dimension is vulnerable to CVE-2022-38440?
Adobe Dimension versions prior to 3.4.6 are vulnerable to CVE-2022-38440.
What are the potential impacts of CVE-2022-38440?
CVE-2022-38440 could allow an attacker to execute arbitrary code in the context of the current user.
Is CVE-2022-38440 present in other operating systems besides Adobe Dimension?
CVE-2022-38440 specifically affects Adobe Dimension and does not affect the operating systems like macOS or Windows directly.