Use After Free Vulnerability in Adobe Acrobat and Reader
CVE-2017-16398

9.8CRITICAL

Key Information:

Vendor: Adobe
Status: Adobe Acrobat Reader 2017.012.20098 And Earlier Versions, 2017.011.30066 And Earlier Versions, 2015.006.30355 And Earlier Versions, 11.0.22 And Earlier Versions
Vendor: CVE Published:; 9 December 2017

What is CVE-2017-16398?

A vulnerability has been identified in Adobe Acrobat and Reader where improper handling of JavaScript objects can lead to a use-after-free condition. This flaw occurs when there is an inconsistency between an existing object and a newly created object, granting attackers unauthorized access to memory regions. This could potentially allow for code corruption, control-flow hijacking, or data leakage. Exploitation of this vulnerability could facilitate arbitrary code execution, making it essential for users to update to secure versions.

Affected Version(s)

Adobe Acrobat Reader 2017.012.20098 and earlier , 2017.011.30066 and earlier , 2015.006.30355 and earlier , 11.0.22 and earlier Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, 11.0.22 and earlier versions