Adobe Dimension has an arbitrary address write vulnerability when parsing USDZ files

CVE-2023-26373

What is CVE-2023-26373?

Adobe Dimension is susceptible to an out-of-bounds write vulnerability that may allow attackers to execute arbitrary code within the context of a user's session. The exploitation of this vulnerability necessitates user interaction, as the user must open a specially crafted file that triggers the flaw. This can lead to potential compromise of user data and system integrity.

References