Impact
Adobe Audition versions 25.3 and older contain an out‑of‑bounds read that can expose data stored in memory. The flaw allows an attacker who supplies a malicious file to read contents beyond a buffer, revealing sensitive information. It does not permit code execution or denial of service, and is limited to memory disclosure.
Affected Systems
The issue affects all users of Adobe Audition 25.3 or earlier, regardless of operating system, when the application is instructed to open a compromised file. No specific platform is singled out in the advisory.
Risk and Exploitability
The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than one percent suggests a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires user interaction: a victim must open a maliciously crafted file. Because the impact is limited to information disclosure and does not lead to further compromise, the overall risk remains modest compared to higher‑impact vulnerabilities.
OpenCVE Enrichment