EUVD-2026-44334
GHSA-hwj9-7pj4-px7r
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious Audition file
-
DeliveryDeliver via email or shared library
-
ExploitVictim opens file in Audition
-
ExecutionTrigger out-of-bounds write in parser
-
PersistCorrupt memory and hijack execution
-
ImpactExecute code as current user
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the victim to actively open an attacker-supplied malicious file in Adobe Audition (UI:R in the CVSS vector) - there is no remote, network-triggerable, or zero-click path. The attacker needs no prior authentication or privileges on the target (PR:N), and the attack executes locally in the context of the current user (AV:L, S:U), meaning code runs with the victim's rights, not elevated. Limiting factors: the attack fails without user interaction, depends on delivering a crafted file the user chooses to open, and the resulting code execution is confined to the current user's privilege level rather than SYSTEM/root. |
| Impact | The CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H = 7.8 High) indicates the attack is local and requires no privileges but does require user interaction (opening a file), with high impact across confidentiality, integrity, and availability but no scope change. There is no EPSS score, KEV listing, or SSVC decision data provided, and no public proof-of-concept has been identified, so real-world exploitation pressure currently appears low-to-moderate rather than urgent. This profile is typical of desktop file-parsing bugs: dangerous if a targeted user is socially engineered into opening a malicious project/audio file, but not self-propagating or remotely triggerable, so it is a patch-on-normal-cycle priority for most environments rather than an emergency - with the caveat that creative/media workstation users routinely open third-party files, which raises practical exposure. Note that AV:L combined with UI:R means the 'attack' is delivering a file to the victim, not network access. |
| Exploit ScenarioDerived | An attacker crafts a malicious Audition project or audio file that triggers the out-of-bounds write during parsing and distributes it via email, a shared media library, or a compromised collaboration platform. When a targeted editor opens the file in a vulnerable version of Audition, the memory corruption is triggered and attacker-controlled code executes with that user's privileges. No public exploit code has been identified at time of analysis, but the technique mirrors well-understood file-format memory-corruption exploitation. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 14, 2026
Arbitrary code execution in Adobe Audition arises from an out-of-bounds write (memory corruption) that runs in the context of the current user when a victim opens a maliciously crafted media/project file. All affected versions covered by Adobe advisory APSB26-71 are impacted, and while no public exploit has been identified at time of analysis, the local attack vector with required user interaction makes it a classic file-format weaponization risk. The CVSS 7.8 (High) reflects full confidentiality, integrity, and availability impact once the file is opened.
RemediationAI
Apply the fixed version identified in Adobe Security Bulletin APSB26-71 (https://helpx.adobe.com/security/products/audition/apsb26-71.html); the exact patched build number is published in that advisory and should be deployed via Adobe Creative Cloud desktop app updates - the specific fix version is not included in the provided input data and must be read from the advisory rather than assumed. Until patching is complete, reduce exposure by instructing users not to open Audition project or audio files received from untrusted or unsolicited sources, restricting file associations so untrusted files do not auto-launch Audition, and where feasible opening suspect files only in an isolated/sandboxed workstation; the trade-off is workflow friction for editors who legitimately exchange session files. Running Audition under a standard (non-administrative) user account also limits post-exploitation impact since code executes in the current user's context.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Adobe Audition is a professional digital audio workstation used for recording, mixing, and editing audio, and it parses a wide range of audio and session/project file formats. The root cause is CWE-787 (Out-of-bounds Write): the application's file parser writes data past the bounds of an allocated buffer - typically due to insufficient validation of length or index fields in a malformed file - corrupting adjacent heap or stack memory. Attacker control over the corrupted memory can be leveraged to hijack execution flow, which is why Adobe tags this as RCE / Memory Corruption / Buffer Overflow. The CPE data (cpe:2.3:a:adobe:audition) confirms the affected component is the Audition desktop application itself rather than a shared library or service.
Know when Audition gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-parsing bug triggered by opening a malicious file locally: AV:L and UI:R, no prior privileges (PR:N), and code execution yields full C/I/A impact within the user's context (S:U).
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
DescriptionCVE.org
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Executive ViewAI
Adobe Audition contains a critical memory corruption vulnerability (CVE-2026-48365) that enables arbitrary code execution when users open maliciously crafted media files. All versions covered by Adobe advisory APSB26-71 are affected. With no vendor patch available, organizations relying on Audition face immediate compromise risk through social engineering or supply-chain file delivery.
Restrict Audition file opening to known-safe internal sources only; quarantine Audition file attachments at email boundaries; require administrative approval before opening externally-sourced media files; disable Audition on systems where it is not essential; provide user training on suspicious file delivery recognition; implement file-system monitoring to detect unauthorized Audition file access patterns.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Arbitrary code execution in Adobe Audition arises from an out-of-bounds write (CWE-787) triggered when a victim opens a
Arbitrary code execution in Adobe Audition arises from an out-of-bounds write (CWE-787) triggered when a victim opens a
Arbitrary code execution in Adobe Audition arises from an out-of-bounds write (CWE-787) triggered when a user opens a ma
Arbitrary code execution in Adobe Audition arises from an out-of-bounds write (CWE-787) triggered when a victim opens a
Arbitrary code execution in Adobe Audition 25.3 and earlier through a local out-of-bounds write vulnerability that requi
Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in a
Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resul
Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vu
Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Rated high severity (CVSS 7.8), th
Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Rated high severity (CVSS 7.8), th
Out-of-bounds read in Adobe Audition exposes sensitive process memory when a victim opens a specially crafted media or p
Adobe Audition versions 25.3 and earlier contain an out-of-bounds read vulnerability that exposes sensitive data from ap
Exploit-DB