Apple MACOS

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. An app may be able to execute arbitrary code with kernel privileges.

Acrobat Reader | Use After Free (CWE-416)

InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

Acrobat Reader | Use After Free (CWE-416)

Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution

Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution

Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Animate | Improper Input Validation (CWE-20)

ZDI-CAN-24055: Adobe Substance 3D Stager SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-19385: Adobe Dimension OBJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-CAN-19386: Adobe Dimension FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Photoshop 2024 MPO File Parsing Use-After-Free vulnerability

Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Animate | Integer Overflow or Wraparound (CWE-190)

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. Processing an image may lead to arbitrary code execution.

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Animate | Access of Uninitialized Pointer (CWE-824)

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)

Animate | NULL Pointer Dereference (CWE-476)

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Adobe Acrobat Reader DC ActiveX Control (AxAcroPDFLib.AxAcroPDF) stack-based stale pointer vulnerability

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Ventura 13, watchOS 9. An app may be able to execute arbitrary code with kernel privileges.

Animate | Use After Free (CWE-416)

Adobe Animate OGG File Parsing Heap Memory Corruption remote code execution Vulnerability

Adobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution Vulnerability

[FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability Notification

A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.

Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-21812: Adobe Illustrator JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

ZDI-CAN-19480: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-CAN-19493: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-CAN-19540: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability