Description
Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-02-10
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory Disclosure
Action: Apply Patch
AI Analysis

Impact

An out‑of‑bounds read in Adobe Audition allows an attacker to read data beyond the bounds of a buffer, potentially leaking sensitive information that resides in process memory. This vulnerability is identified as CWE‑125, which indicates a defect that could expose confidential data rather than cause arbitrary code execution.

Affected Systems

Adobe Audition versions 25.3 and all earlier releases are impacted. Users running those versions on any platform supported by the product are at risk.

Risk and Exploitability

The score is moderate (CVSS 5.5) and the EPSS probability is less than one percent, suggesting that exploitation is rare at present. The vulnerability is not listed in CISA’s KEV catalog. Exploiting it requires the victim to open a malicious file, meaning user interaction is needed, which reduces the likelihood of automated attacks.

Generated by OpenCVE AI on April 18, 2026 at 12:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Adobe Audition to a version newer than 25.3
  • Run Adobe Audition in a sandboxed environment to contain potential memory exposure
  • Disable or filter untrusted media files from being opened automatically in Audition

Generated by OpenCVE AI on April 18, 2026 at 12:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 11 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Feb 2026 16:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*

Tue, 10 Feb 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe audition
Vendors & Products Adobe
Adobe audition

Tue, 10 Feb 2026 18:15:00 +0000

Type Values Removed Values Added
Description Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Audition | Out-of-bounds Read (CWE-125)
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}

Subscriptions

Adobe Audition
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-02-11T15:18:35.816Z

Reserved: 2025-12-12T22:01:18.193Z

Link: CVE-2026-21317

cve-icon Vulnrichment

Updated: 2026-02-11T15:18:31.275Z

cve-icon NVD

Status : Analyzed

Published: 2026-02-10T18:16:29.027

Modified: 2026-02-11T15:57:58.853

Link: CVE-2026-21317

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-18T13:00:08Z

Weaknesses