CVE-2024-45150: Adobe Dimension RCE Vulnerability

CVE-2024-45150 Overview

Adobe Dimension versions 4.0.3 and earlier contain an out-of-bounds write vulnerability [CWE-787] that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file crafted by an attacker. The flaw affects Adobe Dimension installations on both Microsoft Windows and Apple macOS. Adobe published Security Advisory APSB24-74 with corrected builds and remediation guidance.

Critical Impact
Opening a malicious Dimension file can trigger arbitrary code execution under the current user's privileges, enabling code deployment, data access, and lateral movement staging.

Affected Products

Adobe Dimension versions 4.0.3 and earlier
Adobe Dimension on Microsoft Windows
Adobe Dimension on Apple macOS

Discovery Timeline

2024-10-09 - CVE-2024-45150 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2024-45150

Vulnerability Analysis

The vulnerability is an out-of-bounds write [CWE-787] within Adobe Dimension's file parsing logic. When Dimension processes a specially crafted project or asset file, it writes data past the bounds of an allocated buffer. This corruption can overwrite adjacent memory structures, including function pointers or object metadata. An attacker who controls the layout of the malicious file can steer execution to attacker-supplied code. Execution occurs in the security context of the user running Dimension, so any privileges held by that user are inherited by the attacker's payload.

Root Cause

The underlying defect is inadequate bounds validation on attacker-controlled length or index fields inside a Dimension-parsed file format. The parser trusts values from the input file and writes into a buffer without verifying the destination remains within the allocated region. This class of flaw commonly arises in complex 3D and asset formats where nested structures, embedded resources, and variable-length records are decoded during load.

Attack Vector

Exploitation is local and requires user interaction. An attacker delivers a malicious Dimension file through email attachments, shared storage, chat platforms, or drive-by download. The victim must open the file in Adobe Dimension for the vulnerable code path to execute. No elevated privileges or prior authentication to the target system are required from the attacker. Successful exploitation yields arbitrary code execution as the current user.

No public proof-of-concept or in-the-wild exploitation has been reported. Refer to the Adobe Security Advisory APSB24-74 for vendor technical details.

Detection Methods for CVE-2024-45150

Indicators of Compromise

Unexpected child processes spawned by Dimension.exe (Windows) or the Dimension binary (macOS), such as command interpreters or scripting hosts.
Dimension project files (.dn, .dim) delivered from untrusted email, external file shares, or messaging platforms.
Crashes or abnormal termination of Dimension immediately after opening a specific file, followed by process re-execution.
New persistence artifacts (scheduled tasks, LaunchAgents, registry Run keys) created shortly after Dimension file activity.

Detection Strategies

Monitor process lineage for Adobe Dimension spawning non-standard children, especially cmd.exe, powershell.exe, wscript.exe, bash, or osascript.
Correlate file-open events for Dimension project extensions with subsequent outbound network connections to unfamiliar destinations.
Track memory-related crash telemetry (Windows Error Reporting, macOS crash reports) referencing Dimension modules as a signal of exploitation attempts.

Monitoring Recommendations

Ingest endpoint process, file, and network telemetry into a centralized analytics platform and alert on Dimension-originated anomalies.
Baseline normal Dimension usage per user to detect deviations such as unusual file paths or off-hours execution.
Review email and web gateway logs for delivery of Dimension file types from external senders.

How to Mitigate CVE-2024-45150

Immediate Actions Required

Update Adobe Dimension to the fixed release identified in Adobe Security Advisory APSB24-74 on all Windows and macOS endpoints.
Inventory workstations with Dimension installed and prioritize patching for users who routinely receive external design assets.
Instruct users to open Dimension files only from trusted, verified sources until patches are applied.

Patch Information

Adobe released fixed versions of Dimension addressing this out-of-bounds write. Consult Adobe Security Advisory APSB24-74 for exact fixed build numbers, download links, and platform-specific installation instructions for Windows and macOS.

Workarounds

Restrict opening of Dimension project files to those from known, trusted sources; block inbound Dimension file extensions at email and web gateways where feasible.
Run Dimension under a standard (non-administrative) user account to limit the impact of arbitrary code execution.
Apply application allowlisting to prevent Dimension from launching unexpected interpreters or downloaded binaries.

bash

# Windows: verify installed Adobe Dimension version
reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" /s /f "Adobe Dimension"

# macOS: verify installed Adobe Dimension version
defaults read "/Applications/Adobe Dimension/Adobe Dimension.app/Contents/Info.plist" CFBundleShortVersionString