Adobe FrameMaker Integer Underflow Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability has been identified in Adobe FrameMaker versions 2020.8, 2022.6 and earlier, related to integer underflow. This vulnerability could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in arbitrary code execution.

Remediation

Users are advised to update to Adobe FrameMaker 2020 Update 9 or Adobe FrameMaker 2022 Update 7. Instructions for downloading these updates are available in the Adobe FrameMaker Tech Notes.

Added: Jul 8, 2025, 11:39 PM
Updated: Jul 8, 2025, 11:39 PM

Vulnerability Rating

Custom Algorithm
spread
2.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.