Skip to content
OpenAdvisories
High NCSC-2025-0363 7 CVEs

Kwetsbaarheden verholpen in Adobe Illustrator

Published Nov 12, 2025 · Updated Nov 12, 2025 · Revision 2 · nl

Summary

Adobe heeft kwetsbaarheden verholpen in Adobe Illustrator (Specifiek voor versies 28.7.10, 28.8.2 en eerder, evenals Illustrator op iPad versies 3.0.9 en eerder).

Details

Interpretaties
De kwetsbaarheden bevinden zich in de wijze waarop Adobe Illustrator en Illustrator op iPad omgaan met speciaal vervaardigde bestanden. Deze kwetsbaarheden kunnen leiden tot willekeurige code-executie wanneer een gebruiker een kwaadwillig bestand opent. Dit kan worden misbruikt door aanvallers om ongeautoriseerde commando's uit te voeren binnen de getroffen systemen.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 7

  • High 7.8

    Illustrator | Heap-based Buffer Overflow (CWE-122)

    Illustrator versions 28.7.10, 29.8.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

  • High 7.8

    Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

  • High 7.8

    Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)

    Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m…

  • High 7.8

    Illustrator on iPad | Out-of-bounds Write (CWE-787)

    Illustrator on iPad versions 3.0.9 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must op…

  • High 7.8

    Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)

    Illustrator on iPad versions 3.0.9 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m…

  • High 7.8

    Illustrator | Out-of-bounds Write (CWE-787)

    Illustrator versions 28.7.10, 29.8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …

  • High 7.8

    Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

Revision history

  1. #1.0.1

    CVE-2025-61829 toegevoegd aan lijst CVE's, inhoudelijk geen wijzigingen

  2. #1.0.0

    Initiele versie

References

  • Reference
    https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html
  • Reference
    https://helpx.adobe.com/security/products/illustrator/apsb25-109.html