Adobe Illustrator version 24.1.2 (and earlier) is affected by a memory corruption vulnerability that occurs when parsing a specially crafted .svg file. This could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.
The product reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://helpx.adobe.com/security/products/illustrator/apsb20-53.html | patch vendor advisory |