CVE-2025-27161
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 125
Summary
CVE-2025-27161 is a critical out-of-bounds read vulnerability affecting Acrobat Reader versions 24.001.30225, 20.005.30748, and 25.001.20428, and earlier. This issue arises when the software fails to properly handle a maliciously crafted file during parsing. The result is a read past the end of an allocated memory structure, which an attacker could exploit to execute code in the context of the current user. User interaction is required for exploitation, as the victim must open the malicious file.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Reader XI
Affected Vendors
- Adobe