CVE-2023-44329

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Nov 16, 2023
Updated: Dec 4, 2023
CWE ID 824

Summary

CVE-2023-44329 is a vulnerability affecting Adobe Bridge versions 13.0.4 and earlier, as well as 14.0.0 and earlier. This issue involves an Access of Uninitialized Pointer, which could potentially result in the disclosure of sensitive memory. An attacker, given the right conditions, might exploit this vulnerability to bypass Address Space Layout Randomization (ASLR), a common security mitigation. To trigger the exploitation, a victim must open a specially crafted malicious file.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share