EUVD-2026-100572
GHSA-85c8-r849-wwq4
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious Dimension file
-
DeliveryDeliver file to victim
-
ExploitVictim opens file in Dimension
-
ExecutionNULL pointer dereference triggered
-
ImpactApplication crashes (denial-of-service)
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A10:2025 - Mishandling of Exceptional Conditions
ASVS 5.0
V16 - Security Logging and Error Handling Null pointer safety, defensive checks
MITRE ATT&CK
1 technique across 1 tactic: Impact The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the victim to manually open an attacker-supplied malicious file within Adobe Dimension (version ≤4.1.8) on the local system - there is no network-facing or automated trigger. No authentication or elevated privileges are needed (PR:N), but the mandatory user interaction (UI:R) and local attack vector (AV:L) are the primary limiting factors: the attacker must first socially engineer file delivery and persuade the user to open it. Impact is confined to application availability (a crash); there is no persistence, no data exposure, and no effect on other systems or users. |
| Impact | This is a genuinely moderate, low-priority issue rather than a high-impact emergency. The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, base 5.5) describes a local, user-interaction-dependent availability-only impact with no confidentiality or integrity loss - the attacker cannot reach the target over a network and must convince a victim to open a malicious file. All exploitation signals align with low urgency: CISA's SSVC decision shows Exploitation=none, Automatable=no, and Technical Impact=partial, and there is no KEV listing and no public exploit identified at time of analysis. EPSS is not provided in the input, so probabilistic exploitation likelihood cannot be quantified. The signals are mutually consistent (no conflict): a crash-only NULL pointer dereference requiring local file-open interaction is a classic nuisance-grade DoS, not a weaponizable foothold. The only limiting nuance is that 'PR:N with UI:R' means no credentials are needed but social engineering (delivering and opening a crafted file) is mandatory, which substantially constrains real-world abuse. |
| Exploit ScenarioDerived | An attacker crafts a malformed Dimension-compatible file and delivers it to a victim via email, shared storage, or a download link. When the victim opens the file in Adobe Dimension (version ≤4.1.8), a NULL pointer dereference is triggered and the application crashes, causing a denial-of-service with loss of unsaved work. No public exploit code is identified at time of analysis, and the impact is limited to application availability - no code execution or data disclosure. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 14, 2026
Application denial-of-service in Adobe Dimension 4.1.8 and earlier allows an attacker to crash the application by convincing a victim to open a specially crafted file on their local system. The flaw is a NULL pointer dereference in Dimension's file handling, so the impact is confined to availability of the application process itself - there is no code execution, no data exposure, and no effect on other systems or users. Exploitation is not automatable, requires the victim to voluntarily open the malicious file (UI:R) from a local vector (AV:L), and no public exploit identified at time of analysis; CISA's SSVC assessment rates exploitation as none.
RemediationAI
Patch available per vendor advisory: Adobe has published security bulletin APSB26-171 (https://www.adobe.com/trust/security/products/dimension/apsb26-171.html), and the source data does not include an exact fixed version string, so administrators should consult that bulletin for the specific remediated Dimension build and upgrade to it (or later) through Creative Cloud / the Adobe updater. Because exploitation is availability-only and requires a user to open a malicious file, the practical compensating control is to block delivery and opening of untrusted Dimension project and 3D asset files at the email gateway and file-share layer, and to set Windows/MacOS file-association policy so unknown attachments are not auto-opened - the trade-off is reduced convenience for users who legitimately exchange 3D assets with external partners. Restricting who can run Dimension on shared workstations, or running it in a sandboxed/throwaway container, limits the blast radius of a crash to a single disposable session at the cost of extra session-management overhead. Given the low SSVC exploitation signal (Exploitation: none, Automatable: no) and the absence of any network-facing trigger, emergency out-of-band response is not warranted; handling this within a normal patch cycle is appropriate.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause is CWE-476, a NULL pointer dereference, occurring within Adobe Dimension's parsing of attacker-supplied document files. Because the parser follows a pointer that has not been initialized or has been set to NULL, the application faults and terminates - a classic availability-only defect rather than a memory-corruption primitive that could be chained into arbitrary code execution. The assessed CVSS vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) confirms the attack surface is local file opening rather than a network service: no privileges or credentials are needed, but the attacker must socially engineer delivery of a file and persuade the user to open it, which is the primary barrier to exploitation. The scope is unchanged (S:U), meaning only the vulnerable Dimension process is affected, and the confidentiality and integrity metrics are both None. ENISA EUVD records the affected range as 'Adobe Dimension 0 ≤4.1.8', and no CPE strings were supplied in the source data, so exact build-level granularity is only available from the vendor's own product listing.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
File must be opened locally by a user, so AV:L and UI:R; no credentials needed (PR:N); crash-only impact gives A:H with C:N/I:N.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A null pointer dereference occurs when a program attempts to access memory through a pointer that has been set to NULL (address 0x0).
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Exploit-DB