Access of Uninitialized Pointer Vulnerability in Adobe Illustrator
CVE-2025-49529

7.8HIGH

Key Information:

Vendor

Adobe
Status
Illustrator
Vendor
CVE Published:
8 July 2025

What is CVE-2025-49529?

Adobe Illustrator versions 28.7.6, 29.5.1, and earlier are vulnerable to an Access of Uninitialized Pointer issue that could allow arbitrary code execution. This exploitation requires user interaction, as a victim must open a specially crafted malicious file to trigger the vulnerability. Users of impacted versions should be cautious and ensure they are protected against such threats to maintain the integrity of their systems.

Affected Version(s)

Illustrator 0 <= 29.5.1

References

https://helpx.adobe.com/security/products/illustrator/aps...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49529 : Access of Uninitialized Pointer Vulnerability in Adobe Illustrator