Use After Free Vulnerability in Adobe Illustrator
CVE-2025-49568

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Illustrator
Vendor
CVE Published:
12 August 2025

What is CVE-2025-49568?

A vulnerability exists in Adobe Illustrator affecting versions 28.7.8 and 29.6.1, as well as earlier iterations, that allows for the potential disclosure of sensitive memory. This Use After Free vulnerability can be exploited if a user interacts with maliciously crafted files, leading to unintended access of memory contents. Prompt attention and patching are recommended to mitigate any risks associated with this issue.

Affected Version(s)

Illustrator 0 <= 29.6.1

References

https://helpx.adobe.com/security/products/illustrator/aps...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.