CVE-2022-34264

Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

State: Published
Severity: 5.5 Medium
Published: Aug 11, 2022
Updated: Apr 23, 2025
Reserved: Jun 21, 2022

Description

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N	adobe

Weaknesses

CWE-125 Out-of-bounds Read (CWE-125)

Affected Products

Product	Versions
FrameMakerAdobe	2019u8 and earlierAffected 2020u4 and earlierAffected None and earlierAffected

References

https://helpx.adobe.com/security/products/framemaker/apsb22-42.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.