← Back

CVE-2022-44516

nvd nist
Published: Dec 19, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (12)

4 products
Acrobat
Acrobat Dc
Acrobat Reader
Acrobat Reader Dc
Configuration A
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
From 17.011.30059 to 17.012.30229
From 20.001.30002 to 20.005.30334
From 22.001.20085 to 22.001.20117
Adobe
From 17.011.30059 to 17.012.30229
From 20.001.30002 to 20.005.30334
From 22.001.20085 to 22.001.20117
Running on/withPlatform Versions
Microsoft
Windows
All versions
Configuration B
6 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Adobe
From 17.011.30059 to 17.012.30227
From 20.001.30002 to 20.005.30331
From 22.001.20085 to 22.001.20112
Adobe
From 17.011.30059 to 17.012.30227
From 20.001.30002 to 20.005.30331
From 22.001.20085 to 22.001.20112
Running on/withPlatform Versions
Apple
Macos
All versions

References (1)

Timeline

No history available yet.