Audition versions 25.3 and earlier contain an out‑of‑bounds read that allows a maliciously crafted file to reveal data stored in memory. The flaw could disclose confidential information such as passwords, cryptographic keys, or other secrets that reside in the process address space. The vulnerability affects confidentiality and could be used as a precursor to other attacks when the exposed data is valuable to an adversary.

Adobe Audition is affected. All builds through version 25.3 are vulnerable; versions 26.0 and later include the fix and are not impacted.

The attack requires user interaction – a victim must open a malicious audio file. CVSS score of 5.5 indicates moderate risk, and the EPSS score is less than 1 % suggesting a low probability of exploitation. The issue is not listed in the CISA Known Exploited Vulnerabilities catalog, implying no currently known active exploitation. Attack vectors are local and file‑based; mitigation involves preventing the execution of unknown files or updating to a patched revision.