CVE-2022-44516: Adobe Acrobat

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

• Adobe Acrobat: from 17.011.30059, before 17.012.30229 (fixed in 17.012.30229); from 20.001.30002, before 20.005.30334 (fixed in 20.005.30334); from 17.011.30059, before 17.012.30227 (fixed in 17.012.30227); from 20.001.30002, before 20.005.30331 (fixed in 20.005.30331)
• Adobe Acrobat DC: from 22.001.20085, before 22.001.20117 (fixed in 22.001.20117); from 22.001.20085, before 22.001.20112 (fixed in 22.001.20112)
• Adobe Acrobat Reader: from 17.011.30059, before 17.012.30229 (fixed in 17.012.30229); from 20.001.30002, before 20.005.30334 (fixed in 20.005.30334); from 17.011.30059, before 17.012.30227 (fixed in 17.012.30227); from 20.001.30002, before 20.005.30331 (fixed in 20.005.30331)
• Adobe Acrobat Reader DC: from 22.001.20085, before 22.001.20117 (fixed in 22.001.20117); from 22.001.20085, before 22.001.20112 (fixed in 22.001.20112)

Published 2024-12-19. Last modified 2026-06-17.