CVE-2026-21312CWE-787

CVE-2026-21312

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

⚡ Opening a malicious file could lead to an out-of-bounds write vulnerability in Audition 25.3 and earlier, allowing a crafty attacker to execute arbitrary code in your system! 🚨 Think of it like a restaurant serving a dish without checking for allergies — if a customer orders something that contains a hidden allergen, it could lead to a disastrous outcome. In this case, that malicious file is the dish, and your computer's safety is at stake! If exploited, an attacker could gain control over the affected system, potentially stealing sensitive data or causing devastating damage. This means they could execute commands with the same privileges as the current user, leading to severe consequences for personal and organizational security!

Put simply

Think of it like a restaurant serving a dish without checking for allergies — if a customer orders something that contains a hidden allergen, it could lead to a disastrous outcome. In this case, that malicious file is the dish, and your computer's safety is at stake! This out-of-bounds write vulnerability enables an attacker to manipulate memory outside the allowable bounds, allowing for arbitrary code execution if the victim opens a specially crafted file. User interaction is required to trigger the exploit, making it a predictable risk but still very dangerous.

What to do

If exploited, an attacker could gain control over the affected system, potentially stealing sensitive data or causing devastating damage. This means they could execute commands with the same privileges as the current user, leading to severe consequences for personal and organizational security! Update your Audition to the latest version to address this vulnerability immediately. Encourage users to be cautious of unsolicited or suspicious files and consider implementing security measures that warn against such risky interactions. It's vital to stay vigilant! You've got this! With a quick update and some caution, you can keep your system safe from this vulnerability. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/audition< 25.625.6
References (1)
EPSS history
Timeline
  • 10 FEB 17:45Z
    Audition | Out-of-bounds Write (CWE-787)
    cvelistv5