CVE-2025-49563

Adobe Illustrator is affected by an out-of-bounds write (CWE-787) that can lead to arbitrary code execution in the context of the current user. Affected versions: 28.7.8, 29.6.1 and earlier. Exploitation requires user interaction (victim must open a malicious file). Remediation: apply the securit...

CVE-2025-49568 Illustrator | Use After Free (CWE-416)

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49568

Adobe Illustrator is affected by CVE-2025-49568 (Use After Free) in Illustrator versions 28.7.8, 29.6.1 and earlier. The vulnerability involves memory mismanagement that could disclose sensitive memory and requires user interaction to exploit (victim opens a malicious file). A fix is available vi...

CVE-2025-49568 Illustrator | Use After Free (CWE-416)

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49564

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49564 Illustrator | Stack-based Buffer Overflow (CWE-121)

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49564 Illustrator | Stack-based Buffer Overflow (CWE-121)

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2025-49564

Adobe Illustrator is affected by CVE-2025-49564: stack-based buffer overflow in versions 28.7.8, 29.6.1 and earlier that can lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The issue is documented across multiple sources (Adobe advisory APSB25-...

CVE-2025-49567 Illustrator | NULL Pointer Dereference (CWE-476)

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires us...

CVE-2025-49567

Summary: CVE-2025-49567 affects Adobe Illustrator versions 28.7.8, 29.6.1 and earlier, due to a NULL Pointer Dereference that can cause application denial-of-service. Exploitation requires user interaction: a victim must open a malicious file, which crashes Illustrator. Multiple connected sources...

PT-2025-32762 · Adobe · Illustrator 29.6.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.8 and earlier Illustrator version 29.6.1 and earlier Description: Illustrator versions 28.7.8 and earlier, and version 29.6.1 and earlier are affected by a Stack-based Buffer Overflow that could lead to arbitrary cod...

PT-2025-32923 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and 19.5.4 and earlier, are affected by an out-of-bounds write issue that may lead to arbitrary co...

PT-2025-32763 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.8 and earlier Illustrator version 29.6.1 and earlier Description: Illustrator is susceptible to a NULL Pointer Dereference issue that may result in application denial-of-service. An attacker could exploit this issue ...

PT-2025-32912 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32927 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier are affected by an out-of-bounds write issue that may lead to...

PT-2025-32888 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25 and earlier Description: Substance3D - Viewer versions 0.25 and earlier are affected by a Heap-based Buffer Overflow vulnerability. Successful exploitation of this issue could lead to arbitrary code executio...

PT-2025-32889 · Adobe · Substance3D - Viewer

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25 and earlier Description: Substance3D - Viewer versions 0.25 and earlier are affected by an out-of-bounds write issue that could lead to arbitrary code execution within the current user's context. Exploitatio...

PT-2025-32916 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an out-of-bounds read issue that may result in the disclosure of sensitive memory. Exploitation of this issue requires a user to open a...

PT-2025-32908 · Adobe · Substance3D - Painter

Name of the Vulnerable Software and Affected Versions: Substance3D - Painter versions 11.0.2 and earlier Description: Substance3D - Painter versions 11.0.2 and earlier are affected by an out-of-bounds read issue that may lead to the disclosure of sensitive memory. Exploitation of this issue...

PT-2025-32944 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and 19.5.4 and earlier Description: InDesign Desktop versions 20.4, 19.5.4, and earlier are affected by an out-of-bounds read issue that may lead to sensitive memory disclosure. Exploitation of this issue requir...