CVE-2021-44181
HIGHAdobe Dimension < 3.4.3 - Out-of-bounds Write via Malicious GIF File
Title source: llmDescription
Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
https://helpx.adobe.com/security/products/dimension/apsb21-116.html
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1570/
Scores
CVSS v3
7.8
EPSS
0.0314
EPSS Percentile
86.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
Status
published
Products (1)
adobe/dimension
< 3.4.3
Published
Dec 20, 2021
Tracked Since
Feb 18, 2026