CVE-2026-47925: Acrobat Reader | Integer Overflow or Wraparound (CWE-190)
Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Acrobat Readerfrom your environment.Uninstall Acrobat Reader from systems where it is not required to eliminate exposure to malicious PDF files that could trigger an integer overflow and cause an application denial-of-service.
- Compensating control
Prevent opening untrusted PDF files: block or scan PDF attachments at email gateways and web/proxy filters, restrict or sandbox PDF viewers, and isolate systems used to view untrusted PDFs to reduce the risk of denial-of-service from malicious files.
- Operational
Instruct users to not open PDF files from untrusted sources and to report suspicious PDFs to the security team. If application crashes occur after opening a PDF, collect the file and relevant logs for analysis and incident handling.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47925?
The severity of CVE-2026-47925 is rated medium with a score of 5.5.
What kind of vulnerability is CVE-2026-47925?
CVE-2026-47925 is an Integer Overflow or Wraparound vulnerability that affects certain versions of Adobe Acrobat Reader.
How can I fix CVE-2026-47925?
To fix CVE-2026-47925, users should update Adobe Acrobat Reader to versions later than 24.001.30365 and 26.001.21651.
What could an attacker do with CVE-2026-47925?
An attacker could exploit CVE-2026-47925 to crash Adobe Acrobat Reader, leading to a denial-of-service condition.
Which versions of Adobe products are affected by CVE-2026-47925?
CVE-2026-47925 affects Adobe Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier.