Adobe FrameMaker Out-of-Bounds Read Vulnerability Allowing Memory Leak

A memory leak vulnerability due to an out-of-bounds read has been identified in Adobe FrameMaker. This issue affects versions through 2020.8 and versions through 2022.6 on Windows. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive memory.

Remediation

Users are advised to update to Adobe FrameMaker 2020 Update 9 or Adobe FrameMaker 2022 Update 7. Instructions for updating can be found in the Adobe FrameMaker Tech Note.