CVE-2025-61828CWE-787

CVE-2025-61828

High Β· published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

⚑ An out-of-bounds write in Illustrator on iPad could let malicious files run wild β€” all it takes is a user to open one! πŸ”₯ Think of it like a restaurant where a chef serves food without checking the ingredients β€” one wrong item could lead to a disastrous recipe! In this case, opening a vulnerable file could let attackers cook up some harmful code right in your system. If exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, potentially leading to data breaches or system compromise. This is particularly alarming because once the code is running, the attacker has almost free rein β€” your digital kitchen's doors thrown wide open!

Put simply

Think of it like a restaurant where a chef serves food without checking the ingredients β€” one wrong item could lead to a disastrous recipe! In this case, opening a vulnerable file could let attackers cook up some harmful code right in your system. This out-of-bounds write vulnerability allows an attacker to manipulate memory by opening a specially crafted file, leading to arbitrary code execution under the current user's permissions. Essentially, it’s a flaw that lets unverified ingredients spoil your dish!

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, potentially leading to data breaches or system compromise. This is particularly alarming because once the code is running, the attacker has almost free rein β€” your digital kitchen's doors thrown wide open! To safeguard against this risk, update your Illustrator on iPad to version 3.0.10 or later immediately. Additionally, educate users to avoid opening suspicious files and consider implementing stricter file handling polices to minimize exposure. πŸ”’ You've got this! Just follow these steps to keep your digital kitchen safe and sound. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.8 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00221 Β· 12.0th percentile
Weakness
CWE-787 Β· Out-of-bounds Write
Published
2025-11-11T23:15Z
Affected products (1)
ProductVersionsFixed in
adobe/illustrator_on_ipad< 3.0.103.0.10
References (1)
EPSS history
Timeline
  • 11 NOV 17:49Z
    Illustrator on iPad | Out-of-bounds Write (CWE-787)
    cvelistv5