CVE-2023-25891: 
Adobe Dimension vulnerability analysis and mitigation

Adobe Dimension versions 3.4.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file. The vulnerability was discovered and disclosed on March 28, 2023, and is tracked as CVE-2023-25891. This security flaw affects Adobe Dimension software running on both Windows and macOS operating systems (NVD).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs when parsing a crafted file, which could result in reading past the end of an allocated memory structure. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (Adobe Security).

If successfully exploited, this vulnerability could allow an attacker to execute code in the context of the current user. The high CVSS score indicates potential severe impacts on system confidentiality, integrity, and availability (NVD).

Adobe has released version 3.4.8 to address this vulnerability. Users are advised to update to the latest version of Adobe Dimension to mitigate this security risk (Adobe Security).