CVE-2024-20792: Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption
Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20792?
CVE-2024-20792 is classified as a Use After Free vulnerability, which can lead to arbitrary code execution.
How do I fix CVE-2024-20792?
To fix CVE-2024-20792, update Adobe Illustrator to version 27.9.4 or higher, or 28.5 or higher.
What versions of Adobe Illustrator are vulnerable to CVE-2024-20792?
Adobe Illustrator versions 28.4, 27.9.3 and earlier are vulnerable to CVE-2024-20792.
What platforms are affected by CVE-2024-20792?
CVE-2024-20792 affects Adobe Illustrator running on various platforms, but the underlying operating systems such as macOS and Windows are not vulnerable.
What is required for the exploitation of CVE-2024-20792?
Exploitation of CVE-2024-20792 requires the user to open a malicious file.