PT-2025-28773 · Adobe · Framemaker

Published 2025-07-08 · Updated 2025-07-09 · CVE-2025-47121

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier

Description: The issue is an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a victim must open a malicious file.

Recommendations: For Adobe Framemaker versions 2020.8 and earlier, update to a version later than 2022.6 to resolve the issue. For Adobe Framemaker version 2022.6, update to a version later than 2022.6 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability, however the above recommendations should be followed to mitigate the risk.

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2025-08393

CVE-2025-47121

Affected Products

Framemaker

References · 6

• https://bdu.fstec.ru/vul/2025-08393 · Security Note
• https://helpx.adobe.com/security/products/framemaker/apsb25-66.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47121 · Security Note
• https://t.me/cvenotify/128097 · Telegram Post
• https://twitter.com/CVEnew/status/1942924503660798195 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1942885515595755631 · Twitter Post