CVE-2025-61831CWE-787

CVE-2025-61831

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds write vulnerability in Illustrator could let crafty attackers execute arbitrary code, but they need you to open the door first! 🚪💻 Think of it like a waiter bringing you a dish that’s just a tad too spicy. If you take a bite, you could end up with a fiery surprise — all because the kitchen didn’t measure properly! If an attacker can trick you into opening a malicious file, they could take control of your system with the current user's privileges. This means they could install malware, access sensitive information, or wreak havoc on your files. It's a potential nightmare waiting to happen!

Put simply

Think of it like a waiter bringing you a dish that’s just a tad too spicy. If you take a bite, you could end up with a fiery surprise — all because the kitchen didn’t measure properly! This out-of-bounds write vulnerability in Illustrator allows an attacker to execute arbitrary code when a malicious file is opened by the user, exploiting memory mishandling to gain unauthorized access.

What to do

If an attacker can trick you into opening a malicious file, they could take control of your system with the current user's privileges. This means they could install malware, access sensitive information, or wreak havoc on your files. It's a potential nightmare waiting to happen! Update Illustrator to version 28.7.11 or 29.8.3 or later. Ensure that you’re cautious with files from untrusted sources and avoid opening suspicious attachments. Regularly review your security practices to minimize risks. You’ve got this! Stay vigilant, update your software, and you’ll keep your creative space secure! 🛡️✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-11-11T23:15Z
Affected products (2)
ProductVersionsFixed in
adobe/illustrator≥ 28.0, ≤ 28.7.10—
adobe/illustrator≥ 29.0, < 29.8.329.8.3
References (1)
EPSS history
Timeline
  • 11 NOV 17:16Z
    Illustrator | Out-of-bounds Write (CWE-787)
    cvelistv5