Format Plugins, versions 1.1.2 and earlier, contain a heap‑based buffer overflow that can be triggered by opening a specially crafted malicious file. The flaw allows an attacker to execute arbitrary code in the context of the user who opens the file, potentially compromising the system. The vulnerability is a classic out‑of‑bounds write that leads to code execution.

Adobe Format Plugins, versions 1.1.2 and earlier, deployed on systems that process Adobe format files.

The CVSS score of 7.8 places this flaw in the high severity range, indicating a high likelihood of detrimental impact if exploited. The EPSS score is not available, but the requirement for user interaction limits the attack surface to individuals who open malicious documents. The bug is not currently listed in CISA’s KEV catalog, suggesting no confirmed public exploits yet. Nevertheless, the combination of a buffer overflow and the ability to execute code warrants vigilant mitigation.