CVE-2025-27186 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-27186

CVE-2025-27186 affects Adobe After Effects, with an out-of-bounds read in versions 25.1, 24.6.4 and earlier that can disclose memory contents. The vulnerability allows bypassing mitigations like ASLR and requires a user to open a malicious file to exploit. Public documentation from Adobe referenc...

CVE-2025-27187

Adobe After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability (CVE-2025-27187) that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources confirm the issue and cite APS...

CVE-2025-27187 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-27204

CVE-2025-27204 affects Adobe After Effects up to versions 25.1 and 24.6.4 and earlier, due to an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Connected sources indicate Adobe released APSB25-23 security upda...

CVE-2025-27204 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

PT-2025-15630 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2022.6 and earlier Adobe Framemaker version 2020.8 Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...

PT-2025-15606 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.1, 24.6.4 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Adobe XMP Toolkit 缓冲区错误漏洞

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Used to integrate Xmp functionality into a product or solution. Adobe XMP Toolkit suffers from a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to cause a...

PT-2025-15641 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15642 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. To...

PT-2025-15640 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15620 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.7, 23.0.10 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. To...

Out-of-bounds Read

JSON is vulnerable to an out-of-bounds read. The vulnerability is due to improper handling of specially crafted JSON documents, allowing an attacker to cause a crash or leak sensitive memory contents...

CVE-2025-27180

Substance3D - Modeler versions 1.15.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-27164

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2025-27163

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2025-24448

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2025-24449

Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Adobe Substance 3D Modeler 0.0.x < 1.21.0 Multiple Vulnerabilities (APSB25-21)

The version of Adobe Substance 3D Modeler installed on the remote host is prior to 1.21.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-21 advisory. - Substance3D - Modeler versions 1.15.0 and earlier are affected by a NULL Pointer Dereference vulnerability...