PT-2025-1288 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 3.0.7 and earlier Description: The issue is related to an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss...

PT-2025-1289 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 3.0.7 and earlier Description: The issue is related to an Integer Underflow Wrap or Wraparound that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

Adobe Illustrator 数字错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2025-02140)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an out-of-bounds write vulnerability that originates from a boundary error when the application handles untrusted input. An attacker could exploit the...

Adobe Illustrator Out-of-Bounds Write Vulnerability (CNVD-2025-02139)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds write vulnerability exists in Adobe Illustrator version 29.0.0 and prior versions, which can be exploited by an attacker to execute arbitrary code in the context of the...

The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Adobe Illustrator Versions 29.0.0, 28.7.2 and earlier. The vulnerabilities are in the way Adobe Illustrator handles specially crafted files. The first vulnerability allows attackers to execute arbitrary code when a user opens a malicious file, which can lead to...

CVE-2024-49538

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49541

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49538

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49541

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49538 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49538 Illustrator | Out-of-bounds Write (CWE-787)

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-49538

CVE-2024-49538 (Adobe Illustrator) is an out-of-bounds write vulnerability affecting Illustrator versions 29.0.0, 28.7.2 and earlier, with arbitrary code execution in the context of the current user. Exploitation requires a user to open a malicious file (user interaction). Multiple sources confir...

CVE-2024-49541 Illustrator | Out-of-bounds Read (CWE-125)

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-49541

Adobe Illustrator is affected by CVE-2024-49541 (and related CVEs) describing an out-of-bounds read vulnerability in Illustrator 29.0.0, 28.7.2 and earlier that could disclose memory, and an out-of-bounds write vulnerability that could allow arbitrary code execution. Exploitation requires user in...

CVE-2024-49541 Illustrator | Out-of-bounds Read (CWE-125)

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address vulnerabilities in multiple Adobe software products including Adobe Acrobat, Adobe Illustrator, and Adobe InDesign. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and...

Adobe Illustrator < 28.7.3 / 29.0.0 < 29.1.0 Multiple Arbitrary code execution (APSB24-94) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 28.7.3, 29.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-94 advisory. - Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds write vulnerability th...