Adobe Acrobat Reader Out-of-Bounds Read Vulnerability Allowing Memory Disclosure and Mitigation Bypass

A vulnerability allowing out-of-bounds read has been identified in Adobe Acrobat Reader. Affected versions include 24.001.30225, 20.005.30748, and 25.001.20428 and earlier. This vulnerability could lead to the disclosure of sensitive memory, with an attacker potentially exploiting it to bypass mitigations like Address Space Layout Randomization (ASLR). The exploitation of this vulnerability requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, allowing for the disclosure of sensitive information and the potential to bypass ASLR, a security feature that helps prevent the execution of malicious code.