Out-of-Bounds Read Vulnerability in XMP Toolkit by Adobe
CVE-2025-30306
What is CVE-2025-30306?
The XMP Toolkit developed by Adobe is vulnerable to an out-of-bounds read issue in versions 2023.12 and earlier. This vulnerability could allow an attacker to access sensitive memory, undermining security measures such as Address Space Layout Randomization (ASLR). Successful exploitation necessitates user interaction, specifically, the victim must open a specially crafted malicious file. This could potentially expose sensitive information, highlighting the need for users to remain vigilant and ensure their software is up-to-date.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
XMPWorker 0 <= 2023.12
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved