Out-of-Bounds Read Vulnerability in XMP Toolkit by Adobe

CVE-2025-30306

What is CVE-2025-30306?

The XMP Toolkit developed by Adobe is vulnerable to an out-of-bounds read issue in versions 2023.12 and earlier. This vulnerability could allow an attacker to access sensitive memory, undermining security measures such as Address Space Layout Randomization (ASLR). Successful exploitation necessitates user interaction, specifically, the victim must open a specially crafted malicious file. This could potentially expose sensitive information, highlighting the need for users to remain vigilant and ensure their software is up-to-date.

References