First published: Tue Mar 28 2023(Updated: )
Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Dimension | <=3.4.7 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-26333 is an out-of-bounds read vulnerability in Adobe Dimension versions 3.4.7 and earlier.
CVE-2023-26333 allows an attacker to execute code in the context of the current user by leveraging the vulnerability.
CVE-2023-26333 has a severity rating of 7.8 (high).
Adobe Dimension versions 3.4.7 and earlier are affected by CVE-2023-26333.
To fix CVE-2023-26333, update Adobe Dimension to version 3.4.8 or later.