PT-2025-50227 · Adobe · Acrobat Reader

Published

2025-12-09

·

Updated

2026-02-16

·

CVE-2025-64899

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 24.001.30264, 20.005.30793, 25.001.20982, 24.001.30273, 20.005.30803 and earlier
Description The software contains an out-of-bounds read issue when processing a specially designed file. This could allow an attacker to execute code with the privileges of the current user. The issue requires a user to open a malicious file to be exploited.
Recommendations Update Acrobat Reader to a version later than 24.001.30264. Update Acrobat Reader to a version later than 20.005.30793. Update Acrobat Reader to a version later than 25.001.20982. Update Acrobat Reader to a version later than 24.001.30273. Update Acrobat Reader to a version later than 20.005.30803.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15541
CVE-2025-64899
ZDI-25-1043

Affected Products

Acrobat Reader