Apple MACOS any version

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. Processing a maliciously crafted image may lead to arbitrary code execution.

ZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. Processing a file may lead to unexpected app termination or arbitrary code execution.

Buffer Over-read in vim/vim

Acrobat Reader | Use After Free (CWE-416)

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. An app may be able to execute arbitrary code with kernel privileges.

ZDI-CAN-21683: Adobe Audition MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-20279: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-20235: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-20309: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability

ZDI-CAN-20316: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability

Illustrator | Improper Input Validation (CWE-20)

Adobe Indesign 2024 EPS File Parsing Heap Memory Corruption Remote Code Execution Vulnerability

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

InDesign Desktop | Use After Free (CWE-416)

Substance3D - Stager | Use After Free (CWE-416)

A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2. Processing a maliciously crafted package may lead to arbitrary code execution.

Substance3D - Stager | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

InDesign Desktop | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)

Premiere Pro | Use After Free (CWE-416)

Acrobat Reader | Use After Free (CWE-416)