Skip to content
OpenAdvisories
High · 7.8 CVE-2025-49528 EUVD-2025-20733GHSA-vmwr-crjw-m896

Illustrator | Stack-based Buffer Overflow (CWE-121)

Published Jul 8, 2025 · Updated Feb 26, 2026 · Assigned by adobe

Description

Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Illustrator ≤ 29.5.1 —

Advisories 2

References