CVE-2022-38407: Adobe InCopy EPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe InCopy version 17.3 (and earlier) and 16.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Adobe InCopy vulnerability?
The vulnerability ID for this Adobe InCopy vulnerability is CVE-2022-38407.
Which versions of Adobe InCopy are affected by this vulnerability?
Adobe InCopy versions 16.0 through 16.4.2, as well as versions 17.0 through 17.3, are affected by this vulnerability.
What is the severity rating of the CVE-2022-38407 vulnerability?
The severity rating of the CVE-2022-38407 vulnerability is Medium, with a severity value of 5.5.
What is the impact of the CVE-2022-38407 vulnerability?
This vulnerability could lead to the disclosure of sensitive memory and allow an attacker to bypass mitigations such as ASLR.
How can I fix the CVE-2022-38407 vulnerability in Adobe InCopy?
To fix the CVE-2022-38407 vulnerability, update Adobe InCopy to a version later than 17.3 or 16.4.2, depending on the affected version.