Out-of-Bounds Read Vulnerability in Adobe XMP Toolkit

CVE-2025-30308

What is CVE-2025-30308?

The XMP Toolkit versions 2023.12 and earlier are susceptible to an out-of-bounds read vulnerability that can lead to the leakage of sensitive memory contents. This security concern can be exploited by an attacker to bypass certain mitigation techniques, including Address Space Layout Randomization (ASLR). To successfully exploit this vulnerability, the attacker must entice the victim into opening a specifically crafted malicious file, which leverages the vulnerability to gain unauthorized access to sensitive information.

References