The vulnerability is a heap‑based buffer overflow in Adobe FrameMaker 2022 and 2026. The flaw allows an attacker to execute arbitrary code with the privileges of the user who opens a malicious file, as the overflow is triggered when the application processes a specially crafted file. Because this is a classic CWE‑122 buffer overflow, exploitation can lead to full compromise of the affected system if a user runs the compromised document.

Adobe FrameMaker 2022 and 2026 are affected. This includes any installation of these versions across platforms where the product is used for authoring. No additional platform specifics are provided in the CNA data.

The CVSS score of 7.8 indicates a medium‑to‑high impact vulnerability. Exploitation requires user interaction – a victim must open a malicious file. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog, reducing the confidence that a widespread exploit is active. Nonetheless, the ability to execute code in the user’s context warrants prompt remediation.