CVE-2024-34118: Adobe illustrator 2024 TIF File parsing Division by zero denial of service

Published Aug 14, 2024
·
Updated

Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Software

4 affected components
All of the following
Any of the following
Adobe Illustrator>=27.0.0<27.9.5
Adobe Illustrator>=28.0<28.6
Any of the following
macOS
Microsoft Windows

Event History

Aug 14, 2024
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-34118?

CVE-2024-34118 is classified as a denial-of-service vulnerability that can cause Adobe Illustrator to become unresponsive.

2

How do I fix CVE-2024-34118?

To address CVE-2024-34118, update Adobe Illustrator to the latest version beyond 28.6.

3

What versions of Adobe Illustrator are affected by CVE-2024-34118?

CVE-2024-34118 affects Adobe Illustrator versions 28.5, 27.9.4, and earlier.

4

Can CVE-2024-34118 be exploited remotely?

Yes, an attacker can exploit CVE-2024-34118 to create a denial-of-service condition potentially from a remote location.

5

What can happen if I do not address CVE-2024-34118?

Failing to address CVE-2024-34118 may result in application crashes or unresponsiveness when using the affected versions of Illustrator.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203