CVE-2023-25904

Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-125

• https://helpx.adobe.com/security/products/dimension/apsb23-20.htmlPatch, Vendor Advisory
• https://helpx.adobe.com/security/products/dimension/apsb23-20.htmlPatch, Vendor Advisory

Published

Mar 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25899Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-2590Missing Authorization in GitHub repository answerdev/answer …3.5
• CVE-2023-25900Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25901Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25902Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25903Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25905Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25906Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25907Adobe Dimension versions 3.4.7 (and earlier) is affected by …7.8
• CVE-2023-25908Adobe Photoshop versions 23.5.3 (and earlier) and 24.1.1 (an…7.8
• CVE-2023-25909HGiga OAKlouds file uploading function does not restrict upl…9.8
• CVE-2023-2591Improper Neutralization of Input During Web Page Generation …5.4