Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
History

Wed, 14 Aug 2024 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe dimension
CPEs cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:*
Vendors & Products Adobe
Adobe dimension
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 14 Aug 2024 15:15:00 +0000

Type Values Removed Values Added
Description Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-08-14T14:55:38.696Z

Updated: 2024-08-14T17:27:25.551Z

Reserved: 2024-04-30T19:50:50.909Z

Link: CVE-2024-34125

cve-icon Vulnrichment

Updated: 2024-08-14T17:26:51.848Z

cve-icon NVD

Status : Analyzed

Published: 2024-08-14T15:15:19.163

Modified: 2024-08-19T18:56:17.350

Link: CVE-2024-34125

cve-icon Redhat

No data.