CVE-2025-43578
Acrobat Reader | Out-of-bounds Read (CWE-125)
En bref Sévérité MEDIUM 5.5 EPSS EPSS 0.46 % · centile 40 (2026-10-28) État PUBLISHED Publiée 2025-06-10 Mise à jour 2025-06-11 Attribuée par adobe Statut NVD Analyzed Description Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Scores Version Score Vecteur Évalué par CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N adobe CVSS 3.1 MEDIUM 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N NVD · psirt@adobe.com (Secondary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20531cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20531cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20529cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:* ≥ 15.008.20082 < 25.001.20529cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30774cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:* ≥ 24.0.0 < 24.001.30254cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:* ≥ 20.001.30002 < 20.005.30774Produits affectés
Références
Sources
