Adobe Framemaker Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

An out-of-bounds read vulnerability has been identified in Adobe Framemaker versions 2020.8, 2022.6 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker might exploit this issue to bypass mitigations like Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive memory, potentially allowing an attacker to bypass ASLR mitigations.