Skip to content
OpenAdvisories
Medium WID-SEC-2025-0085 12 CVEs

Adobe Creative Cloud Applikationen: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jan 14, 2025 · Updated Jan 14, 2025 · de-DE

Vendor: Adobe Product: Creative Cloud Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 12

  • High 7.8
    CVE-2025-21128

    Substance3D - Stager | Stack-based Buffer Overflow (CWE-121)

    Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

    Adobe Substance3D - Stager
  • High 7.8
    CVE-2025-21129

    Substance3D - Stager | Heap-based Buffer Overflow (CWE-122)

    Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim …

    Adobe Substance3D - Stager
  • High 7.8
    CVE-2025-21130

    Substance3D - Stager | Out-of-bounds Write (CWE-787)

    Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

    Adobe Substance3D - Stager
  • High 7.8
    CVE-2025-21131

    Substance3D - Stager | Out-of-bounds Write (CWE-787)

    Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

    Adobe Substance3D - Stager
  • High 7.8
    CVE-2025-21132

    Substance3D - Stager | Out-of-bounds Write (CWE-787)

    Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

    Adobe Substance3D - Stager
  • High 7.8
    CVE-2025-21133

    Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

    Adobe Illustrator on iPad
  • High 7.8
    CVE-2025-21134

    Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

    Adobe Illustrator on iPad
  • High 7.8
    CVE-2025-21135

    Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that …

    Adobe Animate
  • High 7.8
    CVE-2025-21136

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …

    Adobe Substance3D - Designer
  • High 7.8
    CVE-2025-21137

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

    Adobe Substance3D - Designer
  • High 7.8
    CVE-2025-21138

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must …

    Adobe Substance3D - Designer
  • High 7.8
    CVE-2025-21139

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

    Adobe Substance3D - Designer

Revision history

  1. #1

    Initiale Fassung

References