Adobe XMP Toolkit Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

A vulnerability allowing out-of-bounds read has been identified in Adobe XMP Toolkit versions through 2023.12. This issue could lead to the disclosure of sensitive memory, potentially allowing an attacker to bypass mitigations like Address Space Layout Randomization (ASLR). Exploitation of this vulnerability requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory disclosure, allowing attackers to access sensitive information and bypass ASLR mitigations.