Adobe Audition versions 25.3 and earlier contain an out‑of‑bounds write that can be triggered by a malicious file. The flaw allows an attacker to write to memory locations beyond the bounds of a buffer, potentially leading to the execution of arbitrary code in the context of the user who opens the file. The severity of the vulnerability, as reflected in a CVSS score of 7.8, underscores that any successful exploitation could compromise the integrity of the affected system.

The vulnerability impacts Adobe Audition from the Adobe suite. Specifically, all releases up to and including version 25.3 are affected. No other products or versions are mentioned as impacted.

Despite the low exploitation probability, the flaw allows code execution with the privileges of the logged‑in user. An attacker who successfully delivers a malicious media file could gain control over the system, potentially leading to data theft, ransomware deployment, or lateral movement. The lack of a public exploitation instance provides some breathing space, but the presence of a high CVSS score and the widespread use of Audition mean that administrators should treat the vulnerability as a high‑priority issue until a patch is applied.