Cert-In-Advisories

[CIVN-2025-0303] Multiple Vulnerabilities in Adobe Products

By TeamwinPublished On: November 13, 2025

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Adobe Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: CRITICAL

Software Affected

Adobe Format Plugins 1.1.1 and earlier versions

Adobe Substance 3D Stager 3.1.5 and earlier versions for Windows and macOS

Adobe Pass Authentication Android SDK 3.7.3 and earlier versions for Android

Adobe Illustrator on iPad 3.0.9 and earlier versions for iOS

Adobe Illustrator 2025 29.8.2 and earlier versions for Windows

Adobe Illustrator 2024 28.7.10 and earlier versions for Windows

Adobe Photoshop 2025 26.8.1 and earlier versions for Windows

Adobe InCopy 20.5 and earlier versions for Windows and macOS

Adobe InCopy 19.5.5 and earlier versions for Windows and macOS

Adobe InDesign ID20.5 and earlier versions for Windows and macOS

Adobe InDesign ID19.5.5 and earlier versions for Windows and macOS

Overview

Multiple Vulnerabilities have been reported in Adobe products which could be exploited by an attacker to bypass security restrictions, execute arbitrary code or gain access to sensitive information on the targeted system.

Target Audience:

System administrators, Security teams or end-users of Adobe software products.

Risk Assessment:

High risk of unauthorized access to sensitive data.

Impact Assessment:

Potential for data theft, remote code execution or system compromise.

Description

Multiple vulnerabilities exist in Adobe products due to Heap-based Buffer Overflow; Out-of-bounds Read, Write; Use After Free; Integer Underflow (Wrap or Wraparound) and Incorrect Authorization.

Successful exploitation of these vulnerabilities could allow an attacker to bypass security restrictions, execute arbitrary code or gain access to sensitive information on the targeted system.

Solution

Apply appropriate updates as mentioned in the Adobe Security Bulletin.

https://helpx.adobe.com/security.html/security/security-bulletin.html

Vendor Information

Adobe

https://helpx.adobe.com/security/products/indesign/apsb25-106.html

https://helpx.adobe.com/security/products/incopy/apsb25-107.html

https://helpx.adobe.com/security/products/photoshop/apsb25-108.html

https://helpx.adobe.com/security/products/illustrator/apsb25-109.html

https://helpx.adobe.com/security/products/illustrator-mobile-ios/apsb25-111.html

https://helpx.adobe.com/security/products/pass/apsb25-112.html

https://helpx.adobe.com/security/products/substance3d_stager/apsb25-113.html

https://helpx.adobe.com/security/products/formatplugins/apsb25-114.html

References