CVE-2025-61801CWE-416

CVE-2025-61801

High · published October 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

⚡ User interaction is a must, but it could lead to a wild ride! This Use After Free vulnerability in Dimension versions 4.1.4 and earlier means that just opening a malicious file could unleash arbitrary code execution right under your nose! 🔥 Think of it like receiving a package at your doorstep. If the delivery driver leaves the package without a proper signature check, you could end up with a surprise – maybe a blender instead of a book! In this case, opening a malicious file is like signing for that unexpected package without checking its contents. If exploited, an attacker could run arbitrary code in the context of the current user, meaning they could access sensitive information, alter files, or even take control of your system. This can be absolutely devastating if sensitive data is involved.

Put simply

Think of it like receiving a package at your doorstep. If the delivery driver leaves the package without a proper signature check, you could end up with a surprise – maybe a blender instead of a book! In this case, opening a malicious file is like signing for that unexpected package without checking its contents. This vulnerability arises from improper handling of memory, where an application uses a freed memory space. This allows an attacker to execute arbitrary code if the user opens a specially crafted file, leading to potential system compromise.

What to do

If exploited, an attacker could run arbitrary code in the context of the current user, meaning they could access sensitive information, alter files, or even take control of your system. This can be absolutely devastating if sensitive data is involved. To protect yourself, immediately upgrade to Dimension version 4.1.5 or later. Consider educating users about the risks of opening unknown files and implement security measures to mitigate these risks. You've got this! By staying proactive and following these steps, you'll keep your systems secure and user-friendly! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-15T00:15Z
Affected products (1)
ProductVersionsFixed in
adobe/dimension< 4.1.54.1.5
References (1)
EPSS history
Timeline
  • 14 OCT 19:34Z
    Dimension | Use After Free (CWE-416)
    cvelistv5