The vulnerability is a stack‑based buffer overflow in Adobe Dimension that permits arbitrary code execution via a malformed file. An attacker could supply a crafted file; when a user opens it, the overflow could lead to the execution of arbitrary payloads with the same privileges as the user. The flaw is identified as CWE‑121.

Adobe Dimension is the only product listed as affected. No specific version information is provided, so all installations of Adobe Dimension that are not patched are potentially vulnerable.

With a CVSS score of 7.8, the vulnerability is considered high severity. The EPSS score of 0.00199 (<1%) indicates a very low probability of exploitation. It is not listed in the CISA KEV catalog, so there is no known exploit currently available. Exploitation requires user interaction, so preventing users from opening malicious files is a key mitigation. Once a file is opened, the attack can run code with the user’s privileges, potentially compromising the entire system.