Out-of-Bounds Read Vulnerability in Adobe Acrobat Reader DC Products

CVE-2022-44517

Summary

CVE-2022-44517 is a high-risk out-of-bounds read vulnerability identified in Adobe Acrobat Reader DC. This vulnerability affects version 22.001.20085 and earlier, version 20.005.3031x and earlier, as well as version 17.012.30205 and earlier. It occurs when the application processes a specially crafted file, potentially allowing an attacker to read data beyond the allocated memory area. Exploitation of this vulnerability could enable attackers to bypass important security mitigations like Address Space Layout Randomization (ASLR). It is important to note that successful exploitation requires user interaction, specifically, the victim must open a malicious file. Users are advised to update to the latest version to mitigate risks.

References