Adobe Audition versions 25.3 and earlier contain an out‑of‑bounds read flaw that can expose memory contents, potentially leaking sensitive data. The weakness, identified as CWE-125, allows an attacker to read beyond the intended buffer and disclose information stored in memory. Exploitation requires the victim to open a specially crafted file, after which the memory contents can be read by the application.

Adobe Audition, any version 25.3 or earlier, on all supported platforms. No hardware or operating system restrictions are noted.

The CVSS score of 5.5 indicates a moderate severity with moderate impact on confidentiality, limited impact on integrity and availability, and a moderately large impact range. The EPSS score is below 1%, suggesting that exploitation is unlikely in the broader threat landscape. Adobe does not list this issue in its KEV catalog, and the vulnerability is only exploitable when a user voluntarily opens a malicious file, making user awareness a critical defense layer. Attacks would proceed by delivering a crafted media file, typically via email or file transfer, and tricking a user to open it, leveraging the out‑of‑bounds read to expose memory data.