CVE-2025-64899CWE-125

CVE-2025-64899

High · published December 10, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
41.9
In the wild
Unconfirmed
What it is

⚡ A crafted PDF file is all it takes for an attacker to gain control — just one click and your system could be compromised! 💥 Think of this vulnerability like a surprise inspection at a restaurant. If a chef uses spoiled ingredients to whip up a meal, the unsuspecting diner could get sick. In this case, opening a malicious file is like ordering the dish cooked with those bad ingredients, putting your system at risk! If exploited, this out-of-bounds read vulnerability allows attackers to execute code within the context of the current user, which is absolutely devastating. They could access sensitive data, manipulate files, or even install malware, leading to a full-blown security breach!

Put simply

Think of this vulnerability like a surprise inspection at a restaurant. If a chef uses spoiled ingredients to whip up a meal, the unsuspecting diner could get sick. In this case, opening a malicious file is like ordering the dish cooked with those bad ingredients, putting your system at risk! The out-of-bounds read vulnerability in Acrobat Reader occurs when the application fails to properly handle crafted files, potentially allowing attackers to read memory beyond allocated structures. This could lead to arbitrary code execution if the file is opened by the user.

What to do

If exploited, this out-of-bounds read vulnerability allows attackers to execute code within the context of the current user, which is absolutely devastating. They could access sensitive data, manipulate files, or even install malware, leading to a full-blown security breach! To protect yourself, be sure to update Acrobat Reader to the latest version immediately. Avoid opening unknown or suspicious files, and implement security software that can detect malicious files before they reach you. Stay vigilant! You've got this! With these steps, you'll be one step closer to locking down your security! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-12-10T02:15Z
Affected products (6)
ProductVersionsFixed in
adobe/acrobat≥ 20.001.3005, < 20.005.3083820.005.30838
adobe/acrobat_dc< 25.001.2099725.001.20997
adobe/acrobat_reader≥ 20.001.3005, < 20.005.3083820.005.30838
adobe/acrobat_reader_dc< 25.001.2099725.001.20997
adobe/acrobat≥ 24.001.20604, < 24.001.3030724.001.30307
adobe/acrobat≥ 24.001.20604, < 24.001.3030824.001.30308
References (1)
EPSS history
Timeline
  • 09 DEC 20:21Z
    Acrobat Reader | Out-of-bounds Read (CWE-125)
    cvelistv5