Adobe Illustrator CVE-2022-38408 Input Validation Bypass Vulnerability

Description

Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an Improper Input Validation and Out-of-bounds Read vulnerability that could lead to arbitrary code execution in the context of the current user and disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Applications

Illustrator

CVE References

CVE-2022-38408 CVE-2022-38409 CVE-2022-38410

Other References

https://helpx.adobe.com/security/products/illustrator/apsb22-55.html