First published: Tue Jun 14 2022(Updated: )
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Illustrator | <=25.4.5 | |
Adobe Illustrator | >=26.0<=26.0.2 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-30649 is an out-of-bounds write vulnerability in Adobe Illustrator versions 26.0.2 and earlier, and 25.4.5 and earlier.
CVE-2022-30649 has a severity rating of 7.8, which is considered high.
CVE-2022-30649 can result in arbitrary code execution in the context of the current user if a victim opens a malicious file.
Adobe Illustrator versions 26.0.2 and earlier, as well as 25.4.5 and earlier, are affected by CVE-2022-30649.
No, Apple macOS and Microsoft Windows are not affected by CVE-2022-30649.
You can find more information about CVE-2022-30649 at the following reference: https://helpx.adobe.com/security/products/illustrator/apsb22-26.html