Out-of-Bounds Read Vulnerability in Adobe XMP Toolkit

CVE-2025-30305

What is CVE-2025-30305?

The XMP Toolkit from Adobe has an out-of-bounds read vulnerability that poses a risk of sensitive memory disclosure. This issue can be exploited by an attacker if the victim interacts with a malicious file, potentially allowing the attacker to bypass mitigations like Address Space Layout Randomization (ASLR). It is crucial for users of XMP Toolkit versions up to 2023.12 to be aware of this risk and take necessary precautions.

References