EUVD-2026-49933
GHSA-5jvm-8c9r-4h98
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local accessibility and required user interaction define the attack surface; complete confidentiality, integrity, and availability impact.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Opening a malicious file in Adobe Format Plugins can trigger a heap-based buffer overflow, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction, and no active exploitation or public exploit code has been reported at this time.
Technical ContextAI
Adobe Format Plugins is a software component used to parse various document and media file formats. The vulnerability stems from a heap-based buffer overflow (CWE-122) during file parsing, where an unchecked memory operation on the heap can be overflowed with attacker-controlled data, leading to control of program flow. The affected product is identified by CPE cpe:2.3:a:adobe:format_plugins:*:*:*:*:*:*:*:*, indicating all versions until a patched release.
RemediationAI
Apply the vendor-released patch detailed in Adobe advisory APSB26-87. Users should update Format Plugins to the latest version immediately. If updating is not feasible, mitigate by avoiding the opening of untrusted files in any application that relies on these plugins, though this workaround may impact normal file-handling workflows.
More in Format Plugins
View allArbitrary code execution in Adobe Format Plugins 1.1.2 and earlier occurs through a heap-based buffer overflow that exec
Arbitrary code execution in Adobe Format Plugins versions 1.1.2 and earlier occurs via a heap-based buffer overflow trig
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory expos
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory
Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted fil
Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i
Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i
Same weakness CWE-122 – Heap-based Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today