CVE-2022-34262: Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-34262?
CVE-2022-34262 is rated as a critical severity vulnerability due to its potential to lead to sensitive information disclosure.
How do I fix CVE-2022-34262?
To fix CVE-2022-34262, upgrade Adobe Illustrator to version 26.4 or later.
What versions of Adobe Illustrator are affected by CVE-2022-34262?
Adobe Illustrator versions 26.3.1 and earlier, as well as 25.4.6 and earlier, are affected by CVE-2022-34262.
Can CVE-2022-34262 be exploited remotely?
Yes, CVE-2022-34262 can potentially be exploited remotely if an attacker tricks a user into opening a malicious Illustrator file.
What type of vulnerability is CVE-2022-34262?
CVE-2022-34262 is classified as an out-of-bounds read vulnerability.