CVE-2024-20790
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-20790 is a newly disclosed vulnerability affecting Dimension software versions 3.4.11 and earlier. This issue involves an out-of-bounds read vulnerability, which allows attackers to access sensitive memory content. The consequence of this vulnerability could be the bypassing of mitigations such as Address Space Layout Randomization (ASLR). To exploit this issue, users must open a maliciously crafted file. This vulnerability poses a potential risk to those using the affected software and should be addressed promptly by installing the latest software update.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Dimension
Affected Vendors
- Adobe