CVE-2022-35669: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-35669?
CVE-2022-35669 is considered a critical severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2022-35669?
To fix CVE-2022-35669, update Adobe Acrobat Reader to version 22.001.20143 or later, or Acrobat to version 20.005.30335 or later.
What types of software are affected by CVE-2022-35669?
CVE-2022-35669 affects Adobe Acrobat DC and Adobe Acrobat Reader versions prior to the specified fixed versions.
Can CVE-2022-35669 lead to exploitation of my system?
Yes, CVE-2022-35669 can be exploited to bypass security mitigations like ASLR, potentially compromising system security.
Is there a workaround for CVE-2022-35669 until I can update?
Currently, there is no effective workaround for CVE-2022-35669 other than applying the necessary updates to affected software.