CVE-2024-34138: Adobe Illustrator CGM File Parsing Division By zero
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34138?
CVE-2024-34138 has a medium severity rating, as it can lead to an application denial-of-service (DoS).
How do I fix CVE-2024-34138?
To fix CVE-2024-34138, update Adobe Illustrator to version 28.6 or later.
What versions of Adobe Illustrator are affected by CVE-2024-34138?
Adobe Illustrator versions 28.5, 27.9.4 and earlier are affected by CVE-2024-34138.
What is the impact of exploiting CVE-2024-34138?
Exploiting CVE-2024-34138 can result in crashing the application, causing a denial of service condition.
Are there specific operating systems that are vulnerable to CVE-2024-34138?
CVE-2024-34138 affects Adobe Illustrator independent of the operating system, as it is a software vulnerability.