CVE-2022-34262: Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
First published: Thu Aug 11 2022(Updated: )
Adobe Illustrator versions 26.3.1 (and earlier) and 25.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Illustrator 2024 | <=25.4.6 | |
| Adobe Illustrator 2024 | >=26.0<=26.3.1 | |
| macOS | ||
| Microsoft Windows Operating System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-34262?
CVE-2022-34262 is rated as a critical severity vulnerability due to its potential to lead to sensitive information disclosure.
How do I fix CVE-2022-34262?
To fix CVE-2022-34262, upgrade Adobe Illustrator to version 26.4 or later.
What versions of Adobe Illustrator are affected by CVE-2022-34262?
Adobe Illustrator versions 26.3.1 and earlier, as well as 25.4.6 and earlier, are affected by CVE-2022-34262.
Can CVE-2022-34262 be exploited remotely?
Yes, CVE-2022-34262 can potentially be exploited remotely if an attacker tricks a user into opening a malicious Illustrator file.
What type of vulnerability is CVE-2022-34262?
CVE-2022-34262 is classified as an out-of-bounds read vulnerability.
- agent/type
- agent/remedy
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/title
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe illustrator 2024
- version/adobe illustrator 2024/25.4.6
- version/adobe illustrator 2024/26.0
- version/adobe illustrator 2024/26.3.1
- vendor/apple
- canonical/macos
- vendor/microsoft
- canonical/microsoft windows operating system