Adobe Dimension contains an out‐of‐bounds read vulnerability that can allow an attacker to read sensitive data from memory, potentially exposing confidential information. The flaw is triggered when a user opens a specially crafted file, leading to leakage of process memory contents. No mention of privilege escalation or code execution is present, so the primary consequence is information disclosure.

Adobe Dimension, as identified by Adobe’s CNA, is impacted. No specific version range is listed in the advisory, so all releases before the fix should be treated as vulnerable.

With a CVSS score of 5.5 the weakness is considered moderate; the EPSS score of <1 % indicates a low probability of exploitation in the general population. The vulnerability is not included in CISA’s KEV catalog. Exploitation requires user interaction: the victim must open a malicious file, meaning that attackers depend on social engineering or targeted delivery to succeed.