CVE-2023-25862

Name of the Vulnerable Software and Affected Versions Adobe Illustrator versions 26.5.2 and earlier Adobe Illustrator versions 27.2.0 and earlier

Description The issue is related to an out-of-bounds read vulnerability in the graphic editor. This could allow an attacker to disclose sensitive memory information by using a specially crafted file. The exploitation requires user interaction, where the victim must open a malicious file. This vulnerability could also be leveraged to bypass certain mitigations, such as Address Space Layout Randomization (ASLR).

Recommendations For Adobe Illustrator versions 26.5.2 and earlier, update to a version later than 26.5.2 to resolve the issue. For Adobe Illustrator versions 27.2.0 and earlier, update to a version later than 27.2.0 to resolve the issue. As a temporary workaround, consider avoiding the use of untrusted or unknown files in Adobe Illustrator until a patch is available.