Buffer Overflow Vulnerability in Adobe Illustrator Affects Multiple Versions
CVE-2025-21163

7.8HIGH

Key Information:

Vendor
Adobe
Status
Illustrator
Vendor
CVE Published:
11 February 2025

Summary

Adobe Illustrator versions 29.1 and 28.7.3, along with earlier releases, are susceptible to a stack-based buffer overflow vulnerability. This issue allows for potential arbitrary code execution within the context of the current user, necessitating user interaction to exploit the flaw by opening a specially crafted malicious file.

Affected Version(s)

Illustrator 0 <= 28.7.3

References

https://helpx.adobe.com/security/products/illustrator/aps...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.