Adobe XMP Toolkit Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

An out-of-bounds read vulnerability has been identified in Adobe XMP Toolkit versions through 2023.12. This vulnerability could lead to the disclosure of sensitive memory, potentially allowing an attacker to bypass mitigations like Address Space Layout Randomization (ASLR). Exploitation of this issue requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory disclosure, allowing attackers to access sensitive information and potentially bypass security mitigations such as ASLR.