CVE-2025-49567

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

14 Aug 2025, 01:22

Type Values Removed Values Added
First Time Microsoft
Adobe illustrator
Adobe
Microsoft windows
Apple macos
Apple
References () https://helpx.adobe.com/security/products/illustrator/apsb25-74.html - () https://helpx.adobe.com/security/products/illustrator/apsb25-74.html - Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

12 Aug 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-12 17:15

Updated : 2025-08-14 01:22


NVD link : CVE-2025-49567

Mitre link : CVE-2025-49567


JSON object : View

Products Affected

adobe

  • illustrator

microsoft

  • windows

apple

  • macos
CWE
CWE-476

NULL Pointer Dereference