Skip to content
OpenAdvisories
Medium · 5.5 CVE-2021-39861 EUVD-2021-26218GHSA-hh55-2jhp-j24r

Adobe Acrobat Reader DC Catalog Plugin Out-of-Bounds Read Bug

Published Sep 29, 2021 · Updated Sep 17, 2024 · Assigned by adobe

Description

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Acrobat Reader unspecified – ≤ 2020.004.30006, unspecified – ≤ 2017.011.30199, unspecified – ≤ 2021.005.20060, unspecified – ≤ None —

References