CVE-2021-40729

Adobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information Disclosure

State: Published
Severity: 3.3 Low
Published: Oct 15, 2021
Updated: Apr 23, 2025
Reserved: Sep 8, 2021

Description

Adobe Acrobat Reader DC version 21.007.20095 (and earlier), 21.007.20096 (and earlier), 20.004.30015 (and earlier), and 17.011.30202 (and earlier) is affected by a out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.

Scores

CVSS	Score	Vector	Source
3.1	3.3 Low	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	adobe

Weaknesses

CWE-125 Out-of-bounds Read (CWE-125)

Affected Products

Product	Versions
Acrobat ReaderAdobe	21.007.20095 and earlierAffected 21.007.20096 and earlierAffected 20.004.30015 and earlierAffected 17.011.30202 and earlierAffected

References

https://helpx.adobe.com/security/products/acrobat/apsb21-104.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.