CVE-2023-21620: Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-21620?
CVE-2023-21620 is a vulnerability in FrameMaker 2020 Update 4 (and earlier) and 2022 (and earlier) that allows for an out-of-bounds read, potentially leading to the disclosure of sensitive memory.
How does CVE-2023-21620 affect Adobe FrameMaker?
Adobe FrameMaker versions 2020 Update 4 (and earlier) and 2022 (and earlier) are affected by CVE-2023-21620, which can be exploited to disclose sensitive memory.
Can CVE-2023-21620 bypass ASLR?
Yes, CVE-2023-21620 allows an attacker to bypass Address Space Layout Randomization (ASLR) mitigations.
What is the severity rating of CVE-2023-21620?
CVE-2023-21620 has a severity rating of 5.5 (Medium).
How can I fix CVE-2023-21620 in FrameMaker?
To fix CVE-2023-21620 in FrameMaker, it is recommended to update to the latest version provided by Adobe.