CVE-2025-54284CWE-787

CVE-2025-54284

High · published October 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

⚡ If you're using Illustrator versions 29.7 or 28.7.9, beware of a sneaky out-of-bounds write vulnerability waiting to trip you up! Think of it like a chef who accidentally adds too much salt to a recipe—once the damage is done, the dish is ruined, and in this case, it could lead to unexpected code execution! An attacker could exploit this flaw by tricking a user into opening a malicious file, allowing them to execute arbitrary code under the guise of the current user. This could lead to devastating consequences, including unauthorized access to sensitive data or system control. Yikes!

Put simply

Think of it like a chef who accidentally adds too much salt to a recipe—once the damage is done, the dish is ruined, and in this case, it could lead to unexpected code execution! The vulnerability occurs due to an out-of-bounds write, which allows attackers to manipulate memory and execute their own code when a user opens a specially crafted file.

What to do

An attacker could exploit this flaw by tricking a user into opening a malicious file, allowing them to execute arbitrary code under the guise of the current user. This could lead to devastating consequences, including unauthorized access to sensitive data or system control. Yikes! Ensure your Illustrator is updated to the latest version that addresses this issue. Educate your users on the risks of opening suspicious files, and consider implementing file validation measures. Don't wait! You've got this! Stay vigilant, follow these steps, and keep your system secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-10-15T00:15Z
Affected products (2)
ProductVersionsFixed in
adobe/illustrator≥ 28.0, < 28.7.1028.7.10
adobe/illustrator≥ 29.0, < 29.829.8
References (1)
EPSS history
Timeline
  • 14 OCT 19:28Z
    Illustrator | Out-of-bounds Write (CWE-787)
    cvelistv5