← Back

CVE-2024-49541

nvd nist
Published: Dec 10, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@adobe.com (Secondary)

Description

Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (2)

Products: Adobe: Illustrator
1 product
Illustrator
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Adobe
Before 28.7.3
Version 29.0
Running on/withPlatform Versions
Apple
Macos
All versions
Microsoft
Windows
All versions

References (1)

Timeline

No history available yet.