—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Heap-based Buffer Overflow Vulnerability in Adobe Format Plugins

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Adobe Format Plugins versions prior to 2026.07

Overview

A vulnerability has been reported in Adobe Format Plugins which could allow an attacker to execute arbitrary code on the affected system.

Target Audience:

All organizations and individuals using Adobe Format Plugins.

Risk Assessment:

High risk of arbitrary code execution and complete system compromise.

Impact Assessment:

Potential High impact on Confidentiality, Integrity and Availability of the System.

Description

Adobe Format Plugins are software components used by Adobe applications to parse, import, export and process various file formats.

This vulnerability exists in Adobe Format Plugins due to improper handling of memory while processing specially crafted files. An attacker could exploit this vulnerability by convincing a victim to open a maliciously crafted file.

Successful exploitation may result in arbitrary code execution in the security context of the currently logged-in user, allowing the attacker to perform unauthorized actions on the affected system.

Solution

Upgrade Adobe Format Plugins to version 2026.07 or later:

https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html

Vendor Information

Adobe

https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html

References

 

https://helpx.adobe.com/security/products/formatplugins/apsb26-87.html

CVE Name

CVE-2026-48372

– —

Thanks and Regards,

CERT-In

Incident Response Help Desk

e-mail: incident@cert-in.org.in

Phone: +91-11-22902657

Toll Free Number: 1800-11-4949

Toll Free Fax : 1800-11-6969

Web: http://www.cert-in.org.in

PGP Fingerprint: A768 083E 4475 5725 B81A A379 2156 C0C0 B620 D0B4

PGP Key information:

https://www.cert-in.org.in/s2cMainServlet?pageid=CONTACTUS

Postal address:

Indian Computer Emergency Response Team (CERT-In)

Ministry of Electronics and Information Technology

Government of India

Electronics Niketan

6, C.G.O. Complex

New Delhi-110 003

—–BEGIN PGP SIGNATURE—–

iQIzBAEBCAAdFiEE6r4Iam/Ey0c/KakL3jCgcSdcys8FAmp0lz0ACgkQ3jCgcSdc

ys/K1g//aoZyjO05yAh9AEHScNlmbM4UVKpFahmoRqKegoZXnnzl0utLRI6KBy7a

Sut8U2zDqVIbSUZWJMMnSm0kwlE/Hk4C1Z5wV1CPhvz9JLp5pKqctoZNymFWmtuz

dWIKi60ckx0jxIg4bUSHjD6mrQR1b2GKl1yDyai/4eEcMyobSrQXPiqND7rXrTd6

scT0ahGOYcnwXancm7t883onyVqxuU+63zFyrKi2vO7ILdH8YHIuBxE8nL8EDDD6

sKE8ZaK7chxAaXDJnT8EjLmDheY/CxGArgdLGVCUqdFyoG3UWQSaKrRAfjJztLaA

URZOoxvW1HMsWygh0Zz4UUsQgQnwb8IRU4YOeh4ThgUJeDuErgtesa63p/3G53gr

BZXle2EE/lHbkAHCMws0F3NkyOJT2A8JBXse0APQoWuTzewZ1OZmkRidrJWzeGfY

UHPqVPk9RArDhRLlNDbn8zH1BcAxB8t5gUY4+Wb6v8LCm9DTrwyFOAe/Edmdixoq

WSQDinKMOd2HfS1yEJmeUzEFYdq6gE+p5gRaL0u8Z9RgeM9HptXyp/XJsJr0fYVN

OLi/Jj3+Amm5ffme2wVKS2mp2Q3MKDDuVDG5MgoulWaXCp/F6fAb0y9InHctLW1j

HpTdVAIqAECFCWVRIw2dPh1u59o9q7veRB2O/G13I0dXNCrfvT8=

=ThC6

—–END PGP SIGNATURE—–