CVE-2022-38445 - Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Published Oct 14, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.41%

Description

Adobe Dimension versions 3.4.5 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Vendor Adobe Product Dimension Default
unknown
Affected
- ≥ unspecified, ≤ 3.4.5
- ≥ unspecified, ≤ None

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Dimension	unknown	Affected ≥ unspecified, ≤ 3.4.5 ≥ unspecified, ≤ None

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41030
Advisory
https://helpx.adobe.com/security/products/dimension/apsb22-57.html
PatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41030		Advisory
https://helpx.adobe.com/security/products/dimension/apsb22-57.html		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Oct 14, 2022

Updated Apr 23, 2025

Reserved Aug 18, 2022

Link CVE-2022-38445

CISA Vulnrichment

Updated Apr 23, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-38445

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Oct 14, 2022

Updated Apr 23, 2025

Link EUVD-2022-41030

GitHub

No data