VULNERABILITY INTELLIGENCE

CVE-2021-44182

CVSS score3.3 LOW

EPSS probability1.80%

CISA KEVNot currently listed

Published2021-12-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file.

Weakness classification

psirt@adobe.com: CWE-125

Primary references

psirt@adobe.com — Patch, Vendor Advisory
psirt@adobe.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry