← CVE Intelligence

CVE-2024-20791

Illustrator 2024 BMP File Parsing Memory Corruption PUBLISHED

Description (CNA)

Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (CNA)

Vendor / productVersions
Adobe / Illustratoraffected 0 through 27.9.3

CWE

CWE-125

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.