Skip to content
AdobeCVE-2026-48372

Adobe Format Plugins: heap buffer overflow

High7.8CVE-2026-48372 · Published Jul 28, 2026 · updated Aug 5, 2026

Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe advisory

Affected versions

PackageAffectedFixed in
Format Plugins
Product
<= 2026.05No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122, CWE-787

More Adobe advisories

All Adobe
Advisory
Adobe Bridge: improper authorization
High8.2Jul 28
Adobe Bridge: untrusted search path
High8.2Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: out-of-bounds write
High7.8Jul 28
Adobe Bridge: untrusted search path
High8.6Jul 28

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.