CVE-2026-71441

Illustrator | Out-of-bounds Read (CWE-125)

View on CVE.org
Published Aug 25, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Analysis

AI-generated

Technical impact

Illustrator is vulnerable to an out‑of‑bounds read that can expose data residing in memory. The flaw allows an attacker to read beyond a buffer boundary, potentially revealing confidential information. The issue is categorized as CWE‑125 and is triggered when a malicious file is opened by the application.

Affected Systems

Adobe Illustrator Desktop 2025 and Adobe Illustrator Desktop 2026 are affected. No additional sub‑versions are listed in the CNA data.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, and the absence of an EPSS score means exploitation probability is not quantified. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires user interaction: an unsuspecting victim must open a crafted AI file, making it a user‑dependent threat.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Download and install the Adobe Illustrator patch released under the APSS‑26‑124 advisory.
  • Limit the opening of AI files to trusted sources only, disabling automatic processing of unverified files.
  • Use sandboxing or isolated workstations to handle unfamiliar AI files before allowing them to run in the main environment.

Generated by OpenCVE AI on August 25, 2026 at 20:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Adobe illustrator
Apple
Apple macos
Microsoft
Microsoft windows
CPEs cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Adobe illustrator
Apple
Apple macos
Microsoft
Microsoft windows
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Adobe
Adobe illustrator Desktop 2025
Adobe illustrator Desktop 2026
Vendors & Products Adobe
Adobe illustrator Desktop 2025
Adobe illustrator Desktop 2026
Type Values Removed Values Added
Description Illustrator is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Illustrator | Out-of-bounds Read (CWE-125)
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Aug 27, 2026, 10:32 PM
Reserved
Aug 6, 2026, 4:40 PM

View source JSON

Updated
Aug 27, 2026, 4:16 PM

JSON

Status
Analyzed
Published
Aug 25, 2026, 6:18 PM
Modified
Sep 8, 2026, 12:59 PM

View source JSON

No data.

Updated
Aug 25, 2026, 8:45 PM

JSON