CVE-2022-34222: Adobe Acrobat Reader DC query Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-34222?
CVE-2022-34222 has been assigned a high severity rating due to the potential for exploitation through crafted files leading to out-of-bounds reads.
How do I fix CVE-2022-34222?
To fix CVE-2022-34222, update your Adobe Acrobat Reader or Adobe Acrobat to the latest version recommended by Adobe.
Which versions are affected by CVE-2022-34222?
CVE-2022-34222 affects Adobe Acrobat Reader versions 22.001.20142 and earlier, as well as versions 20.005.30334 and earlier, and 17.012.30229 and earlier.
What systems are impacted by CVE-2022-34222?
CVE-2022-34222 impacts users on Microsoft Windows and MacOS if they are using the vulnerable versions of Adobe Acrobat or Adobe Acrobat Reader.
Can CVE-2022-34222 lead to data exposure?
Yes, CVE-2022-34222 can potentially lead to data exposure as it involves reading beyond allocated memory boundaries, which may expose sensitive information.