CVE-2025-24449: 
Adobe Illustrator vulnerability analysis and mitigation

Adobe Illustrator versions 29.2.1, 28.7.4 and earlier are affected by an out-of-bounds read vulnerability identified as CVE-2025-24449. The vulnerability was disclosed on March 11, 2025, and affects Adobe Illustrator software installations (NVD).

The vulnerability is classified as an out-of-bounds read (CWE-125) that could lead to disclosure of sensitive memory. The vulnerability has received a CVSS v3.1 Base Score of 5.5 (Medium) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, indicating local access is required and user interaction is necessary (NVD).

If exploited, this vulnerability could lead to the disclosure of sensitive memory and potentially allow attackers to bypass security mitigations such as ASLR (Address Space Layout Randomization). The vulnerability primarily affects the confidentiality of the system, with no direct impact on integrity or availability (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update their Adobe Illustrator installations to versions newer than 29.2.1 and 28.7.4 (Adobe Security).