Description
Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-10-13
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Assess Impact
AI Analysis

Impact

The vulnerability in Adobe Dimension is a NULL pointer dereference that can cause the application to crash when it attempts to access an invalid memory address. This crash manifests as a denial‑of‑service condition, interrupting any design processes and potentially halting continuous workflows that depend on the software. The flaw is identified as CWE‑476, illustrating that the code fails to guard against a null reference before use.

Affected Systems

Adobe Dimension is the product affected. The specific version range is not disclosed in the available data, so all releases prior to an announced fix are considered vulnerable. No platform distinctions or product variants are listed.

Risk and Exploitability

The CVSS score of 5.5 indicates a moderate severity, while the EPSS score of less than 1% suggests a very low likelihood of exploitation in the wild. The flaw is not listed in CISA’s KEV catalog. Exploitation requires the user to open a malicious file, implying that the attack vector depends on user interaction and cannot be triggered remotely without social engineering.

Generated by OpenCVE AI on October 16, 2026 at 05:15 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Check Adobe’s official security advisories for any update that addresses the null pointer dereference and apply the patch when it becomes available.
  • Configure file‑opening policies to restrict or warn users when opening proprietary Dimension files from untrusted sources.
  • Run Adobe Dimension in a sandboxed or virtualized environment to isolate the application and limit the impact of a crash.
  • Provide user training to recognize and avoid opening suspicious files that could contain malicious content.

Generated by OpenCVE AI on October 16, 2026 at 05:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe dimension
Vendors & Products Adobe
Adobe dimension

Tue, 13 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
Description Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Dimension | NULL Pointer Dereference (CWE-476)
Weaknesses CWE-476
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Subscriptions

Adobe Dimension
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-10-13T20:26:24.626Z

Reserved: 2026-10-01T11:29:57.906Z

Link: CVE-2026-103855

cve-icon Vulnrichment

Updated: 2026-10-13T20:26:15.640Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-13T20:17:12.137

Modified: 2026-10-14T15:50:50.180

Link: CVE-2026-103855

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T14:03:11Z

Weaknesses