Adobe Acrobat and Reader vulnerabilities
30 known CVE vulnerabilities in Adobe Acrobat and Reader, translated and rated.
- CVE-2017-16418High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer, affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. This issue occurs in the image conversion module that handles XPS files.
- CVE-2017-16416High
An issue was discovered in Adobe Acrobat and Reader related to writing data past the end of the intended buffer. The vulnerability affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16415High
A vulnerability exists in Adobe Acrobat and Reader that allows data to be written past the end of the intended buffer, potentially leading to corruption of sensitive data or execution of arbitrary code. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16414High
A vulnerability exists in Adobe Acrobat and Reader related to computations that read data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16410High
A vulnerability exists in Adobe Acrobat and Reader related to untrusted input used to calculate an array index in the image conversion module when processing GIF files. This can lead to writing to a memory location outside of the allocated memory addresses for the data structure.
- CVE-2017-16409High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16408High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16405High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16403High
A vulnerability exists in Adobe Acrobat and Reader that allows reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16402High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer in the JPEG 2000 module. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16394High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer in the WebCapture module. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16393High
A vulnerability exists in Adobe Acrobat and Reader related to use after free in the JavaScript engine. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16390High
A use after free vulnerability exists in Adobe Acrobat and Reader affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. The mismatch between an old and a new object can provide an attacker with unintended memory access.
- CVE-2017-16389High
A vulnerability was discovered in Adobe Acrobat and Reader affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. This is a use after free vulnerability in the JavaScript engine that can lead to unintended memory access.
- CVE-2017-16388High
A vulnerability exists in Adobe Acrobat and Reader related to a use after free issue in the JavaScript API engine. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16386High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16385High
A vulnerability exists in Adobe Acrobat and Reader related to improper buffer access during TIFF parsing in XPS conversion. Crafted TIFF image input can lead to a mismatch between allocated buffer size and allowed access, potentially enabling arbitrary code execution.
- CVE-2017-16384High
An issue exists in Adobe Acrobat and Reader related to a buffer over-read in the exif processing module for a PNG file during XPS conversion. Invalid input leads to computations that point to memory locations outside the valid buffer areas.
- CVE-2017-16383High
A heap overflow vulnerability was discovered in Adobe Acrobat and Reader when processing a JPEG file embedded within an XPS document. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16382High
A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16379High
A vulnerability was discovered in Adobe Acrobat and Reader affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. This is an instance of a type confusion overflow vulnerability in the graphics rendering engine.
- CVE-2017-16376High
A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16375High
An issue exists in Adobe Acrobat and Reader related to untrusted pointer dereference in the JavaScript API engine. An attacker can craft JavaScript input that leads to reading memory outside the process address space, potentially exposing sensitive data.
- CVE-2017-16374High
An issue exists in Adobe Acrobat and Reader related to a buffer over-read in the JPEG 2000 module. An invalid JPEG 2000 input code stream leads to computations that point to locations outside valid memory areas.
- CVE-2017-16373High
An issue in Adobe Acrobat and Reader is related to untrusted pointer dereference, which may lead to sensitive data exposure. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.
- CVE-2017-16372High
An issue in Adobe Acrobat and Reader is related to untrusted pointer dereference in the JavaScript API engine, potentially leading to sensitive data exposure.
- CVE-2017-16371High
An issue exists in Adobe Acrobat and Reader related to untrusted pointer dereference in the JavaScript engine. An attacker can craft input that leads to reading memory outside the process address space, potentially exposing sensitive data.
- CVE-2017-16365High
An issue exists in Adobe Acrobat and Reader related to a buffer over-read in the True Type2 Font parsing module. A corrupted cmap table input leads to computations that point to locations outside valid memory areas, potentially allowing an attacker to obtain sensitive information.
- CVE-2017-16364High
An issue exists in Adobe Acrobat and Reader related to untrusted pointer dereference when handling number format dictionary entries. This can allow an attacker to access sensitive data.
- CVE-2017-11293Critical
A memory corruption vulnerability exists in Adobe Acrobat and Reader that could be exploited to execute arbitrary code. This affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

