Adobe Bridge Heap-Based Buffer Overflow Vulnerability Allowing Memory Exposure

A heap-based buffer overflow vulnerability has been identified in Adobe Bridge versions 14.1.8, 15.1.1 and earlier. This vulnerability could lead to memory exposure, allowing an attacker to disclose sensitive information stored in memory. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized disclosure of sensitive information from memory.

Remediation

Users are advised to update to Adobe Bridge version 14.1.9 (LTS) or 15.1.2. These updates are available through the Creative Cloud desktop app's update mechanism. For more information on how to update, please refer to the Adobe Creative Cloud Updates help page.