EUVD-2026-35835
GHSA-rf2g-jcmc-354j
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (adobe) · only source for this CVE.
CVSS VectorVendor: adobe
Lifecycle Timeline
1DescriptionCVE.org
Format Plugins versions 1.1.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe Format Plugins versions 1.1.2 and earlier occurs via a heap-based buffer overflow triggered when a victim opens a malicious file. Exploitation runs in the context of the current user and requires user interaction, with no public exploit identified at time of analysis. The flaw is addressed in Adobe Security Bulletin APSB26-65.
Technical ContextAI
Format Plugins is an Adobe component used to parse and render various file formats, typically loaded by host Adobe applications when handling specific document types. The root cause is CWE-122 (heap-based buffer overflow), where the plugin's parsing routines fail to correctly bound a memory write within a dynamically allocated heap buffer while processing attacker-controlled file content. Successful corruption of heap metadata or adjacent objects can be leveraged to redirect execution flow and run attacker-supplied code in-process. No CPE strings were provided in the available intelligence, so exact downstream product bundling cannot be enumerated from the data, but Adobe identifies all Format Plugins builds up to and including 1.1.2 as vulnerable.
RemediationAI
Apply the vendor-released patch per Adobe Security Bulletin APSB26-65 (https://helpx.adobe.com/security/products/formatplugins/apsb26-65.html) by upgrading Format Plugins to the fixed version identified in that advisory; the exact patched version string is not enumerated in the available intelligence, so administrators must consult the bulletin directly. Until patching is complete, compensating controls include restricting users from opening Format Plugins-handled files received from untrusted sources, blocking the relevant file extensions at email gateways and web proxies (which may disrupt legitimate document workflows), and running affected Adobe applications under least-privilege user accounts to limit the blast radius of successful exploitation. Application-level mitigations such as Microsoft Defender Exploit Guard ASR rules or EDR file-open telemetry on the affected Adobe host process can also raise the cost of exploitation, with the trade-off of additional false-positive triage.
More in Format Plugins
View allOpening a malicious file in Adobe Format Plugins can trigger a heap-based buffer overflow, allowing arbitrary code execu
Arbitrary code execution in Adobe Format Plugins 1.1.2 and earlier occurs through a heap-based buffer overflow that exec
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory expos
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted fil
Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i
Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i
Same weakness CWE-122 – Heap-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today