CVE-2008-4812: Adobe Acrobat

High severity, CVSS 9.3. EPSS: 8.8% chance of exploitation in the next 30 days.

Array index error in Adobe Reader and Acrobat, and the Explorer extension (aka AcroRd32Info), 8.1.2, 8.1.1, and earlier allows remote attackers to execute arbitrary code via a crafted PDF document that triggers an out-of-bounds write, related to parsing of Type 1 fonts.

Affected products

• Adobe Acrobat: up to and including 8.1.2; version 8.1.1 only
• Adobe Acrobat Reader: up to and including 8.0

Published 2008-11-05. Last modified 2026-06-16.