ZDI-24-1141: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-34125.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1141?
ZDI-24-1141 has been assigned a CVSS score indicating a moderate level of severity due to its potential for disclosing sensitive information.
How do I fix ZDI-24-1141?
To fix ZDI-24-1141, ensure that you apply the latest security updates from Adobe for Adobe Dimension.
What are the potential impacts of ZDI-24-1141?
The potential impact of ZDI-24-1141 includes unauthorized access to sensitive information if exploited by an attacker.
Is user interaction required to exploit ZDI-24-1141?
Yes, user interaction is required to exploit ZDI-24-1141, as the target must visit a malicious page or open a malicious file.
Which software versions are affected by ZDI-24-1141?
ZDI-24-1141 affects installations of Adobe Dimension that are not updated to the latest security patches.