Adobe Dimension CVE-2025-61801
HIGHAttack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver malicious Dimension file to victim
-
ExploitVictim opens file in vulnerable Dimension ≤4.1.4
-
ExecutionTrigger use-after-free in file parser
-
ImpactExecute arbitrary code as current user
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Memory lifecycle management
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a local attack vector and active user interaction: a victim must open an attacker-supplied malicious file in Adobe Dimension version 4.1.4 or earlier, triggering the use-after-free during file parsing. There is no network-reachable or unauthenticated path. Limiting factors that reduce realistic risk: the attacker cannot act without social-engineering the user into opening the file, the target must be running a vulnerable Dimension build, and code executes only with the privileges of the current user (no privilege escalation or scope change, S:U). These constraints make exploitation targeted rather than wormable or mass-exploitable. |
| Impact | Signals are largely consistent and point to a moderate, not urgent, priority. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 7.8 HIGH) is driven by high confidentiality, integrity, and availability impact from arbitrary code execution, but it is gated by a local attack vector and required user interaction (the victim must open a malicious file) - this is a client-side file-parsing bug, not a remotely reachable server flaw. EPSS reinforces low real-world urgency at 0.23% (13th percentile), indicating a low modeled probability of exploitation in the next 30 days. The CVE is NOT on CISA KEV and no POC is referenced, so this is 'no public exploit identified at time of analysis.' There is no SSVC decision data in the input. No major conflicts exist between signals: a high technical-impact score correctly coexists with low exploitation likelihood because successful attack depends on social engineering a user into opening a crafted file. Net: a legitimate patch-worthy issue for environments running Adobe Dimension, but not an emergency relative to network-exploitable or actively exploited CVEs. |
| Exploit ScenarioDerived | An attacker crafts a malicious Dimension project or asset file and delivers it via email, a shared drive, or a download disguised as a legitimate 3D asset. When a designer opens the file in a vulnerable Dimension build (4.1.4 or earlier), a use-after-free condition is triggered, allowing arbitrary code execution in the context of that user. No public exploit code is referenced, and the local vector plus required user interaction mean the attack hinges on convincing the victim to open the file. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Arbitrary code execution in Adobe Dimension 4.1.4 and earlier is possible through a use-after-free (CWE-416) triggered when a victim opens a crafted malicious file. The attack is local and requires user interaction, and code runs with the current user's privileges; per the CVSS vector, no privileges are required (PR:N), though social engineering is necessary. EPSS is low at 0.23% (13th percentile) and no public exploit has been identified at time of analysis, making targeted exploitation more likely than opportunistic mass exploitation.
RemediationAI
Apply the vendor fix from Adobe advisory APSB25-103; the supplied data does not specify an exact patched version, so confirm the current non-vulnerable release in the advisory before deployment. Until a fixed build is applied, treat Adobe Dimension files from untrusted sources as malicious: block or quarantine such attachments at email and web gateways, disable automatic file preview or thumbnail generation for Dimension documents where the operating system or application supports it, and require users to open only trusted project files. Run Dimension with least privilege; while the CVSS scope is unchanged and code executes as the current user, a non-administrative account limits the blast radius of successful exploitation. These mitigations reduce exposure but do not fix the underlying use-after-free, and they trade off usability by restricting file handling and previews.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is a use-after-free (CWE-416) in Adobe Dimension, a 3D design and rendering application. During parsing of a crafted file, a memory object is freed and subsequently accessed; an attacker can shape file contents to cause reuse of freed memory, leading to memory corruption that may be leveraged for arbitrary code execution. The CPE entry cpe:2.3:a:adobe:dimension:*:*:*:*:*:*:*:* identifies Adobe Dimension generally, while the vendor description scopes affected releases to 4.1.4 and earlier. The CVSS vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H indicates a local attack vector requiring the user to open a malicious file, no privileges required per the vector, and impact limited to the current user's security context without scope change; exploitation therefore depends on social engineering rather than a remotely reachable service.
Know when Dimension gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File must be opened locally by a user, so AV:L and UI:R; no prior auth needed (PR:N); memory-corruption RCE yields full C/I/A:H with no scope change.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
Dimension versions 4.1.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Executive ViewAI
Adobe Dimension versions 4.1.4 and earlier are affected by a high-severity use-after-free vulnerability (CVE-2025-61801) that enables arbitrary code execution when a user opens a malicious file. With no public exploit identified at time of analysis and a low EPSS score, the risk is primarily targeted rather than opportunistic, but a successful attack could compromise sensitive design data or lead to further network intrusion. Leadership should ensure design teams are aware and that interim mitigations are in place until a patch is available.
No vendor-released patch identified at time of analysis. Interim mitigations: enforce user awareness training on social engineering risks; restrict opening of untrusted Adobe Dimension files via email and web gateways; implement application allowlisting to block unauthorized executables; sandbox Adobe Dimension where feasible; monitor for anomalous process creation from Adobe Dimension. Apply vendor patch when available.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Use-after-free vulnerabilities occur when a program continues to access memory through a pointer after that memory has been deallocated.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Affected Products (CPE)CVE.org
Privilege escalation to account takeover in WatchGuard Dimension allows a low-privileged Dimension Administrator to hija
WatchGuard Dimension's log listening service can be rendered unavailable by an unauthenticated remote attacker flooding
Authenticated SQL injection in WatchGuard Dimension's scheduled report feature permits arbitrary OS command execution as
Authenticated SQL injection in WatchGuard Dimension's audit report feature enables privilege escalation to arbitrary OS
WatchGuard Dimension's log viewer feature exposes an SQL injection flaw that escalates directly to arbitrary command exe
WatchGuard Dimension's Web UI administrator passphrase change endpoint lacks CSRF protection, enabling full account take
Opening a maliciously crafted file in Adobe Dimension 4.1.4 and earlier can trigger an integer overflow (CWE-190) during
Out-of-bounds read in Adobe Dimension 4.1.4 and earlier can be escalated to code execution in the context of the current
An out-of-bounds read during file parsing in Adobe Dimension 4.1.4 and earlier can lead to code execution in the context
Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary
Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary
Dimension versions 4.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary
GitHub PoC
Exploit-DB