CVE-2024-34126

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2024-41832

CVE-2024-41832 affects Adobe Acrobat Reader (versions including 20.005.30636, 24.002.20965/20964, 24.001.30123 and earlier). It is a font gvar TupleVariation data out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim ...

CVE-2024-41832 TALOS-2024-2002 | Adobe Acrobat Reader Font gvar TupleVariation Data Out-Of-Bounds Read Vulnerability

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

CVE-2024-41834

CVE-2024-41834 is an out-of-bounds read vulnerability in Acrobat Reader affecting versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. Exploitation could disclose memory contents and bypass mitigations such as ASLR; successful exploitation requires user interaction (victim...

CVE-2024-41835

CVE-2024-41835 affects Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. The issue is an out-of-bounds read vulnerability that could disclose memory contents and help bypass mitigations such as ASLR. Exploitation requires user interaction (victim must ope...

CVE-2024-41833

CVE-2024-41833 affects Acrobat Reader DC/Acrobat: vulnerable in versions including 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. Root cause is an out-of-bounds read that can disclose sensitive memory and may bypass mitigations like ASLR. Exploitation requires user interactio...

CVE-2024-34127 Adobe Indesign TIF File Parsing Out Of Bound Read

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-34127

Adobe InDesign Desktop: CVE-2024-34127 is an out-of-bounds read vulnerability in TIF file parsing affecting ID19.4, ID18.5.2 and earlier. Root cause is an out-of-bounds read that could disclose memory and bypass ASLR; exploitation requires user interaction (open a malicious file). Impact is memor...

CVE-2024-39387

Adobe Bridge (versions 13.0.8, 14.1.1 and earlier) is affected by an out-of-bounds read vulnerability (CVE-2024-39387) that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include macOS and Windo...

CVE-2024-34134

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CVE-2024-34134) in versions 28.5, 27.9.4 and earlier, enabling memory disclosure and bypass of ASLR. Exploitation requires the user to open a malicious file. Multiple connected sources (NVD/CVE records, APSB24-45 references, an...

CVE-2024-34125

Adobe Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that can disclose memory and bypass ASLR. Exploitation requires a victim to open a malicious file (user interaction). The issue is documented as CVE-2024-34125 with remediation guidance pointing to upd...

CVE-2024-20790

CVE-2024-20790 relates to Adobe Dimension versions 3.4.11 and earlier, which have an out-of-bounds read vulnerability that can disclose sensitive memory and may bypass mitigations like ASLR. Exploitation requires the victim to open a malicious file, i.e., a user-interaction prerequisite. Public d...

CVE-2024-20790 Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX file

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2024-41862

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41863

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41860

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41861 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41862

Adobe Substance 3D Sampler is affected: versions 4.5 and earlier contain an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). In the connected material, remediation is referenced via APSB24-65, noting updates to ad...

CVE-2024-41861

Adobe Substance 3D Sampler has an out-of-bounds read vulnerability (CVE-2024-41861) in version 4.5 and earlier. The flaw can disclose sensitive memory and could bypass ASLR; exploitation requires a user to open a malicious PSD/file. Affected product: Substance 3D Sampler (desktop). Impact: memory...

CVE-2024-41862 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability II, when parsing PSD file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...