CVE-2025-54281CWE-416

CVE-2025-54281

High · published October 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

⚡ A trip to the wrong file can take you down a dangerous path! An attacker can exploit Adobe Framemaker's Use After Free vulnerability by simply getting you to open a malicious document. 😱 Think of it like a library where you return a book that is supposed to be checked in but somehow still has the last owner's sticky notes inside — those notes can change the whole story of your book! If a malicious file is opened, an attacker could execute any code they want within your user context, leading to a complete compromise of your system! Imagine giving someone the key to your entire library, allowing them to rewrite your narrative — absolutely devastating!

Put simply

Think of it like a library where you return a book that is supposed to be checked in but somehow still has the last owner's sticky notes inside — those notes can change the whole story of your book! This Use After Free vulnerability in Adobe Framemaker could allow arbitrary code execution due to improper handling of memory after it has been freed. Essentially, it means the software doesn’t clear its memory correctly after using it, leaving the door open for some sneaky code to run.

What to do

If a malicious file is opened, an attacker could execute any code they want within your user context, leading to a complete compromise of your system! Imagine giving someone the key to your entire library, allowing them to rewrite your narrative — absolutely devastating! Immediately update Adobe Framemaker to version 2020.10 or 2022.8 and ensure you only open files from trusted sources. Additionally, regularly review your software for updates to keep your defenses strong! You've got this! Take these steps and you'll be back to editing with confidence in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-15T00:15Z
Affected products (2)
ProductVersionsFixed in
adobe/framemaker< 2020.102020.10
adobe/framemaker≥ 2022, < 2022.82022.8
References (1)
EPSS history
Timeline
  • 14 OCT 19:21Z
    Adobe Framemaker | Use After Free (CWE-416)
    cvelistv5