Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-44515

Acrobat Reader | Out-of-bounds Read (CWE-125)

Description

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Acrobat Reader

Default version status: affected

  • 0 to ≤ 17.012.30205affected

References