Out-of-Bounds Read Vulnerability in XMP Toolkit by Adobe

CVE-2025-30309

What is CVE-2025-30309?

The XMP Toolkit, specifically versions 2023.12 and earlier, contains an out-of-bounds read vulnerability. This security flaw could potentially allow attackers to disclose sensitive memory information. The exploit requires user interaction, as a victim must open a specially crafted malicious file for the attack to succeed. Given that this vulnerability bypasses existing mitigations like Address Space Layout Randomization (ASLR), it poses a significant risk to users who may unknowingly interact with compromised files.

References