Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Mon, 31 Mar 2025 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe illustrator Apple Apple macos Microsoft Microsoft windows |
|
CPEs | cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Adobe
Adobe illustrator Apple Apple macos Microsoft Microsoft windows |
Tue, 11 Mar 2025 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 11 Mar 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Illustrator versions 29.2.1, 28.7.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | Illustrator | NULL Pointer Dereference (CWE-476) | |
Weaknesses | CWE-476 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2025-03-11T18:31:11.628Z
Reserved: 2025-02-19T22:28:19.018Z
Link: CVE-2025-27170

Updated: 2025-03-11T18:28:48.952Z

Status : Analyzed
Published: 2025-03-11T18:15:35.227
Modified: 2025-03-31T20:02:08.903
Link: CVE-2025-27170

No data.