CVE-2022-35676: Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-35676?
CVE-2022-35676 is a Heap-based Buffer Overflow vulnerability in Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) that could allow arbitrary code execution.
How severe is CVE-2022-35676?
CVE-2022-35676 has a severity rating of 7.8 (High).
Which software versions are affected by CVE-2022-35676?
Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by CVE-2022-35676.
How can CVE-2022-35676 be exploited?
Exploitation of CVE-2022-35676 requires user interaction, where a victim must perform certain actions for arbitrary code execution to occur.
Is Microsoft Windows affected by CVE-2022-35676?
No, Microsoft Windows is not vulnerable to CVE-2022-35676.