CVE-2025-61827CWE-122CWE-787

CVE-2025-61827

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
21.7
In the wild
Unconfirmed
What it is

⚡ A crafty malicious file can turn your Illustrator on iPad into a digital playground for attackers! 🎨 Think of it like opening a mysterious package that looks inviting but is packed with surprises that could explode — you never know what’s inside until you open it! 🎁 With this heap-based buffer overflow, an unsuspecting user could find themselves facing arbitrary code execution — meaning the attacker could run any code they want in your session! This could lead to unauthorized access or even complete control over your device. Yikes! 😱

Put simply

Think of it like opening a mysterious package that looks inviting but is packed with surprises that could explode — you never know what’s inside until you open it! 🎁 This vulnerability affects Illustrator on iPad versions up to 3.0.9, allowing an attacker to exploit a buffer overflow when a user opens a specially crafted file. The result? Code execution with the same privileges as the user!

What to do

With this heap-based buffer overflow, an unsuspecting user could find themselves facing arbitrary code execution — meaning the attacker could run any code they want in your session! This could lead to unauthorized access or even complete control over your device. Yikes! 😱 To safeguard your creative work, update Illustrator on iPad to version 3.1 or later immediately. Additionally, be cautious about opening files from unknown sources — the best defense is a good offense! 🛡️ You've got this! Stay vigilant, update your apps, and keep your digital space secure! 💪✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00302 · 21.7th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-11T23:15Z
Affected products (1)
ProductVersionsFixed in
adobe/illustrator_on_ipad< 3.0.103.0.10
References (1)
EPSS history
Timeline
  • 11 NOV 17:49Z
    Illustrator on iPad | Heap-based Buffer Overflow (CWE-122)
    cvelistv5