Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-21622

Summary

Adobe FrameMaker versions 2020 Update 4 and earlier, as well as 2022 and earlier, contain an out-of-bounds write vulnerability that may allow an attacker to execute arbitrary code in the context of the user running the application. To exploit this vulnerability, a user must be tricked into opening a specially crafted malicious file. This underscores the importance of vigilance when handling files from untrusted sources.

References