Skip to content
OpenAdvisories
High · 7.8 CVE-2022-23187 EUVD-2022-28277GHSA-vvjc-7c69-j5q9

Adobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code execution

Published Mar 11, 2022 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.

Affected products

VendorProductAffectedFixed
Adobe Illustrator unspecified – ≤ 26.0.3, unspecified – ≤ None —

References