CVE-2023-21603: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-21603?
CVE-2023-21603 is an out-of-bounds read vulnerability in Adobe Dimension version 3.4.6 (and earlier) that can lead to the disclosure of sensitive memory.
How does CVE-2023-21603 affect Adobe Dimension?
CVE-2023-21603 affects Adobe Dimension version 3.4.6 (and earlier) by allowing an attacker to bypass mitigations such as ASLR and potentially disclose sensitive memory.
Is Apple macOS affected by CVE-2023-21603?
No, Apple macOS is not affected by CVE-2023-21603.
Is Microsoft Windows affected by CVE-2023-21603?
No, Microsoft Windows is not affected by CVE-2023-21603.
What is the severity of CVE-2023-21603?
CVE-2023-21603 has a severity rating of 5.5 (Medium).
How can I fix the CVE-2023-21603 vulnerability?
To fix the CVE-2023-21603 vulnerability, update to Adobe Dimension version 3.4.7 or later, as recommended by Adobe.