Adobe XMP Toolkit Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

A vulnerability allowing out-of-bounds read has been identified in Adobe XMP Toolkit versions through 2023.12. This vulnerability could lead to the disclosure of sensitive memory. An attacker might exploit this issue to bypass mitigations like Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, potentially leading to the disclosure of sensitive information and allowing attackers to bypass ASLR, a security feature that helps prevent memory corruption vulnerabilities.