CVE-2022-34252: Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-34252?
CVE-2022-34252 is an out-of-bounds read vulnerability in Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) that could lead to disclosure of sensitive memory.
How can this vulnerability be exploited?
This vulnerability can be exploited by an attacker leveraging it to bypass mitigations such as ASLR, leading to the disclosure of sensitive memory.
Is Apple macOS affected by CVE-2022-34252?
No, Apple macOS is not affected by this vulnerability.
Is Microsoft Windows affected by CVE-2022-34252?
No, Microsoft Windows is not affected by this vulnerability.
What is the severity of CVE-2022-34252?
CVE-2022-34252 has a severity rating of medium with a CVSS score of 5.5.
How do I mitigate the CVE-2022-34252 vulnerability?
To mitigate the CVE-2022-34252 vulnerability, it is recommended to update Adobe InCopy to versions 17.2.1 or 16.4.2 (or later) once they become available.
Where can I find more information about CVE-2022-34252?
More information about CVE-2022-34252 can be found on the Adobe Security Bulletin APSB22-29.