CVE-2025-27158

Published Mar 11, 2025

Last updated 10 hours ago

Adobe Acrobat Reader

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-27158 is an Access of Uninitialized Pointer vulnerability affecting Adobe Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428, and earlier. The vulnerability can lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction, specifically, a victim must open a maliciously crafted file. An attacker could exploit this to execute arbitrary code within the application by enticing a user to open a specially crafted PDF file.

Description: Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Source: psirt@adobe.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

psirt@adobe.com: CWE-824

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4CE8886E-41A3-4051-9445-AA467F4785D6",
            "versionEndExcluding": "20.005.30763",
            "versionStartIncluding": "20.001.30002"
          },
          {
            "criteria": "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F2D7AB34-FCA3-4BA4-BA0F-CF1550587348",
            "versionEndExcluding": "24.001.30235",
            "versionStartIncluding": "24.0.0"
          },
          {
            "criteria": "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44FF55AD-AB58-4C0C-B360-548B2D56A1A6",
            "versionEndExcluding": "25.001.20432",
            "versionStartIncluding": "15.008.20082"
          },
          {
            "criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3CDBE304-E9A0-41A4-AA38-015B14F90299",
            "versionEndExcluding": "20.005.30763",
            "versionStartIncluding": "20.001.30002"
          },
          {
            "criteria": "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD3D1C22-BAF2-4249-A295-C63DB076CE3F",
            "versionEndExcluding": "25.001.20432",
            "versionStartIncluding": "15.008.20082"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]