Acrobat Reader DC version 22.001.2011x (and earlier), 20.005.3033x (and earlier) and 17.012.3022x (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Link | Resource |
---|---|
https://helpx.adobe.com/security/products/acrobat/apsb22-16.html | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: adobe
Published: 2022-04-12T00:00:00
Updated: 2022-05-11T17:52:47
Reserved: 2022-03-30T00:00:00
Link: CVE-2022-28260
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-05-11T18:15:28.363
Modified: 2022-05-20T15:21:00.190
Link: CVE-2022-28260
JSON object: View
Redhat Information
No data.
CWE