Adobe Illustrator Integer Underflow Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe Illustrator versions 28.7.6, 29.5.1 and earlier. This integer underflow vulnerability requires user interaction, as a victim must open a malicious file for exploitation to occur.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user.

Remediation

Users are advised to update to Adobe Illustrator 2025 version 29.6 and above or Adobe Illustrator 2024 version 28.7.8 and above. The update can be downloaded from the Adobe Download Page or via the Creative Cloud desktop app's update mechanism.