CVE-2025-61836CWE-191

CVE-2025-61836

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
15.9
In the wild
Unconfirmed
What it is

⚡ An integer underflow in Illustrator on iPad versions 3.0.9 and earlier could turn a crafty file into a secret weapon for attackers! 🔥 Think of this vulnerability like a magic box that opens only when the right password is whispered. If someone tricks you into saying the wrong phrase by opening a malicious file, the box swings wide open, allowing the intruder to access all sorts of goodies inside your device. If exploited, an attacker could run arbitrary code within the user's environment, giving them the keys to the digital kingdom! This could lead to unauthorized access to your files, potentially compromising sensitive data or even wreaking havoc on your device. It's like handing over the remote control to a guest who immediately changes all your favorite channels!

Put simply

Think of this vulnerability like a magic box that opens only when the right password is whispered. If someone tricks you into saying the wrong phrase by opening a malicious file, the box swings wide open, allowing the intruder to access all sorts of goodies inside your device. This integer underflow vulnerability allows an attacker to manipulate memory allocation, resulting in arbitrary code execution when a malicious file is opened. Essentially, it exploits a flaw in how the application processes numerical values, leading to unintended consequences.

What to do

If exploited, an attacker could run arbitrary code within the user's environment, giving them the keys to the digital kingdom! This could lead to unauthorized access to your files, potentially compromising sensitive data or even wreaking havoc on your device. It's like handing over the remote control to a guest who immediately changes all your favorite channels! Update Illustrator on iPad to version 3.1.0 or later immediately to patch this vulnerability. Additionally, educate users about the risks of opening unknown files and implement strict file management policies. Don't take chances with your security! You've got this! By updating your software and staying vigilant, you're keeping your digital world safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.9th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2025-11-11T23:15Z
Affected products (1)
ProductVersionsFixed in
adobe/illustrator_on_ipad< 3.0.103.0.10
References (1)
EPSS history
Timeline
  • 11 NOV 17:49Z
    Illustrator on iPad | Integer Underflow (Wrap or Wraparound) (CWE-191)
    cvelistv5