← voltar
CVE-2025-61842

Format Plugins | Use After Free (CWE-416)

CVSS 5.5 MEDIUMEPSS 0.2%CWE-416
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.5EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
11 nov 2025Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Adobe · Format Plugins