CVE-2026-103854: Dimension | Stack-based Buffer Overflow (CWE-121)
Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must persuade a victim to open a malicious file. The vulnerability is locally exploitable with low attack complexity and requires no privileges before the victim opens the file.
What level of access could successful exploitation provide?
Successful exploitation could allow arbitrary code execution in the context of the current user. The stated impact includes high confidentiality, integrity, and availability impact.
Are users protected if they do not open untrusted files?
The described exploitation path requires opening a malicious file. Avoiding files from untrusted or unexpected sources reduces exposure to this specific attack path.