CVE-2025-43578
Acrobat Reader | Out-of-bounds Read (CWE-125)
At a glance Severity MEDIUM 5.5 EPSS EPSS 0.46 % · percentile 40 (2026-10-27) State PUBLISHED Published 2025-06-10 Updated 2025-06-11 Assigner adobe NVD status Analyzed Description Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N adobe CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N NVD · psirt@adobe.com (Secondary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20531cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20531cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20529cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20529cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30774cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.0.0 < 24.001.30254cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30774Affected products
References
Sources
