Acrobat Reader is vulnerable to an out‑of‑bounds write that allows an attacker to execute code in the context of the user who opens a malicious file. The flaw could compromise confidentiality, integrity, and availability of the system if exploited. The weakness is a buffer overflow (CWE‑787).

Adobe products, including Acrobat 2024, Acrobat Reader, and Adobe Acrobat, on all platforms supported by those releases are affected. No specific patch versions are listed in the CNA data, so any version of the mentioned products may be impacted until a fix is released.

The CVSS score of 7.8 indicates a high severity. Exploitation requires an active user to open a crafted file, making it a user‑interaction vulnerability. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, so while the potential impact is significant, the current exploitation likelihood remains uncertain. The attack vector is likely file‑based, with the attacker delivering a malicious PDF to a vulnerable user.