CVE-2022-38443: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38443?
CVE-2022-38443 is classified as a medium severity vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2022-38443?
To mitigate CVE-2022-38443, users should update Adobe Dimension to version 3.4.6 or later.
What types of systems are affected by CVE-2022-38443?
CVE-2022-38443 affects Adobe Dimension versions prior to 3.4.6, specifically on systems running Adobe Dimension.
Is CVE-2022-38443 exploitable without user interaction?
Exploitation of CVE-2022-38443 requires user interaction, making it less likely to be remotely exploited.
Can CVE-2022-38443 impact MacOS or Windows systems?
CVE-2022-38443 specifically affects Adobe Dimension and does not impact the underlying Windows or macOS systems directly.