CVE-2022-44517

Description

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

PUBLISHED Reserved 2022-10-31 | Published 2024-12-18 | Updated 2024-12-19 | Assigner adobe

Problem types

Out-of-bounds Read (CWE-125)

Product status

References

helpx.adobe.com/security/products/acrobat/apsb22-16.html vendor-advisory

cve.org (CVE-2022-44517)

nvd.nist.gov (CVE-2022-44517)

Download JSON