Product:
Dimension
Summary
Dimension versions 4.1.4 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file. This could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user, requiring user interaction to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-61798 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious file that, when opened by the victim using an affected version of Dimension, triggers the out-of-bounds read. The victim must be tricked into opening this file, allowing the attacker to execute code in the context of the current user.
Affected Products
- Dimension versions 4.1.4 and earlier: These versions are vulnerable to an out-of-bounds read that can lead to code execution.
Mitigation
Users are advised to update to the latest version of Dimension to mitigate this vulnerability. Additionally, avoid opening files from untrusted sources to reduce the risk of exploitation.