Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-28637

Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution Vulnerability

Description

Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability achieve arbitrary read / write system information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Acrobat Reader

  • unspecified to ≤ 2020.004.30005affected
  • unspecified to ≤ 2017.011.30197affected
  • unspecified to ≤ 2021.005.20054affected
  • unspecified to ≤ Noneaffected

References