Adobe Illustrator NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

Vulnerability

A NULL pointer dereference vulnerability has been identified in Adobe Illustrator versions 29.8.3, 30.0 and earlier. This vulnerability could lead to a denial-of-service condition by causing the application to crash, disrupting services. Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Remediation

Users are advised to update to Adobe Illustrator 2025 version 29.8.4 and above or Adobe Illustrator 2026 version 30.1 and above. These updates are available through the Creative Cloud desktop app's update mechanism. For more information, please reference the Adobe Creative Cloud Updates help page.

Added: Jan 13, 2026, 9:12 PM
Updated: Jan 13, 2026, 9:12 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
4.4
remediation
7.7
relevance
2.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.