CVE-2025-61839CWE-125

CVE-2025-61839

High · published November 12, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
17.4
In the wild
Unconfirmed
What it is

⚡ An out-of-bounds read in Format Plugins could let an attacker execute code just by getting you to open a file! 😱 Think of it like a restaurant handing you a menu that spills over the edge with some extra items that shouldn't be there. If you accidentally order from that overflow, you might end up with unexpected dishes—some not so appetizing! This vulnerability could lead to an attacker executing code in the context of the current user, potentially causing havoc on your system. If they trick you into opening a malicious file, it could be like handing over the keys to your castle. Who knows what they could do!

Put simply

Think of it like a restaurant handing you a menu that spills over the edge with some extra items that shouldn't be there. If you accidentally order from that overflow, you might end up with unexpected dishes—some not so appetizing! The out-of-bounds read vulnerability in Format Plugins versions 1.1.1 and earlier occurs when parsing a crafted file, causing the application to read memory beyond its allocated bounds, which could be exploited to execute arbitrary code.

What to do

This vulnerability could lead to an attacker executing code in the context of the current user, potentially causing havoc on your system. If they trick you into opening a malicious file, it could be like handing over the keys to your castle. Who knows what they could do! To protect yourself, update Format Plugins to version 1.1.2 or later immediately. Additionally, educate users about the risks of opening unknown files; awareness is key! You've got this! Follow these steps, and you'll have a secure setup in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-12T00:15Z
Affected products (1)
ProductVersionsFixed in
adobe/format_pluginsall versions—
References (1)
EPSS history
Timeline
  • 11 NOV 18:58Z
    Format Plugins | Out-of-bounds Read (CWE-125)
    cvelistv5