PT-2025-42224 · Bridge · Bridge

Published 2025-10-15 · Updated 2025-10-17 · CVE-2025-54278

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bridge versions 14.1.8 and 15.1.1 and earlier

Description A Heap-based Buffer Overflow exists in Bridge that could result in memory exposure. An attacker could exploit this to disclose sensitive information stored in memory. User interaction is required for exploitation, specifically, a victim must open a malicious file.

Recommendations Update Bridge to a version later than 15.1.1. Update Bridge to a version later than 14.1.8.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-54278

Affected Products

Bridge

References · 7

• https://osv.dev/vulnerability/CVE-2025-54278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54278 · Security Note
• https://helpx.adobe.com/security/products/bridge/apsb25-96.html · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1978348466574131221 · Twitter Post
• https://t.me/cveNotify/139159 · Telegram Post
• https://twitter.com/CVEnew/status/1978562111304327505 · Twitter Post
• https://t.me/CVEtracker/34934 · Telegram Post