Out-of-Bounds Read Vulnerability in Adobe Acrobat Reader DC

CVE-2022-44515

Summary

CVE-2022-44515 is a critical out-of-bounds read vulnerability affecting Adobe Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. This vulnerability arises when Acrobat Reader processes a specially crafted file, potentially leading to read operations beyond the allocated memory boundaries. Such exploitation could enable attackers to bypass security mechanisms like Address Space Layout Randomization (ASLR). Importantly, for an attack to be successful, user interaction is required, as the targeted individual must open a malicious file. Users are advised to update their Acrobat Reader to the latest version to mitigate the risks associated with this vulnerability. For additional details, refer to Adobe's security advisory.

References