← Database

CVE-2022-44515

MEDIUM CVSS: 5.5 Published: 2024-12-19 Modified: 2026-06-17

Description

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Platforms

Adobe AcrobatMicrosoft WindowsAdobe Acrobat ReaderAdobe Acrobat Reader DcAdobe Acrobat DcApple Macos

Weakness Type

CWE-125

References