The vulnerability is a heap-based buffer overflow in Adobe Format Plugins versions 1.1.2 and earlier that can be triggered by opening a specially crafted file, allowing an attacker to run code with the privileges of the current user.

Adobe Format Plugins 1.1.2 and earlier are affected and would be impacted by any file that exploits the heap overflow.

The CVSS score of 7.8 indicates a high severity risk; the exploit requires user interaction to open a malicious file, and the vulnerability is not listed in CISA KEV. The lack of an EPSS score means the current exploit probability is unknown, but the attack path is clear and could lead to full compromise of the user’s system.