CVE-2023-26328: ZDI-CAN-20212: Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Published Mar 28, 2023
·Updated
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
3 affected components
Adobe Dimension<=3.4.7
macOS
Microsoft Windows
Remediation
Event History
Mar 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Adobe Dimension vulnerability?
The vulnerability ID for this Adobe Dimension vulnerability is CVE-2023-26328.
2
What is the severity of CVE-2023-26328?
The severity of CVE-2023-26328 is high, with a severity value of 7.8.
3
What is the affected software for CVE-2023-26328?
The affected software for CVE-2023-26328 is Adobe Dimension versions 3.4.7 (and earlier).
4
What is the impact of CVE-2023-26328?
The impact of CVE-2023-26328 is that it could result in arbitrary code execution in the context of the current user.
5
How can CVE-2023-26328 be exploited?
Exploitation of CVE-2023-26328 requires user interaction in that a victim must open a malicious file.