Adobe Acrobat Reader Out-of-Bounds Read Vulnerability Allowing Memory Disclosure and Mitigation Bypass

A vulnerability allowing out-of-bounds read has been identified in Adobe Acrobat Reader. This issue affects versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier. The vulnerability could lead to the disclosure of sensitive memory, potentially allowing an attacker to bypass mitigations such as Address Space Layout Randomization (ASLR). Exploitation of this vulnerability requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory disclosure, allowing an attacker to access sensitive information and bypass certain security mitigations like ASLR.