CVE-2022-30666: Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak
Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-30666?
The severity of CVE-2022-30666 is medium.
How does CVE-2022-30666 affect Adobe Illustrator?
CVE-2022-30666 affects Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) by exposing a vulnerability that could lead to disclosure of sensitive memory.
What can an attacker potentially do with CVE-2022-30666?
An attacker could leverage CVE-2022-30666 to bypass mitigations such as ASLR and potentially disclose sensitive memory.
How can I mitigate the vulnerability in Adobe Illustrator versions affected by CVE-2022-30666?
To mitigate CVE-2022-30666, it is recommended to update Adobe Illustrator to version 26.0.3 or later.
Where can I find more information about CVE-2022-30666?
More information about CVE-2022-30666 can be found at the Adobe Security Bulletin APSB22-26.