CVE-2023-26334 — ZDI-CAN-20149: Adobe Dimension USD File Parsing Uninitialized Pointer Information Disclosure Vulnerability

CVE-2023-26334

ZDI-CAN-20149: Adobe Dimension USD File Parsing Uninitialized Pointer Information Disclosure Vulnerability PUBLISHED

Description (CNA)

Adobe Dimension versions 3.4.7 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / product	Versions
Adobe / Dimension	affected unspecified through 3.4.7; affected unspecified through None

CWE

CWE-824

References

https://helpx.adobe.com/security/products/dimension/apsb23-20.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/dimension/apsb23-20.html

CISA-ADP

No English description supplied.

No references supplied.