Skip to content
OpenAdvisories
High · 7.8 CVE-2020-24415 EUVD-2020-17135GHSA-qfp8-vmx9-3487

Adobe Illustrator Memory Corruption Vulnerability

Published Oct 20, 2020 · Updated Sep 16, 2024 · Assigned by adobe

Description

Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Affected products

VendorProductAffectedFixed
Adobe Illustrator unspecified – ≤ 24.1.2, unspecified – ≤ None —

References