Adobe Audition versions 25.3 and earlier contain a memory corruption flaw. Based on the description, it is inferred that the flaw involves memory access beyond the end of a buffer, which may lead to a crash or become unresponsive, resulting in a denial of service. The weakness is identified as CWE‑788.

The vulnerability affects Adobe Audition products distributed to users under copyright of Adobe. All installations running version 25.3 or older are impacted. More recent releases after 25.3 have fixed the flaw.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% shows a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires a victim to open a specially crafted file; thus the attack vector is local file-based and needs user interaction. Because of the low probability and the lack of remote access requirements, the overall risk is moderate but still significant enough to warrant timely remediation.