CVE-2022-35677 - Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Adobe FrameMaker SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published Aug 11, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.51%

Description

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Vendor Adobe Product FrameMaker Default
unknown
Affected
- ≥ unspecified, ≤ 2019u8
- ≥ unspecified, ≤ 2020u4
- ≥ unspecified, ≤ None

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	FrameMaker	unknown	Affected ≥ unspecified, ≤ 2019u8 ≥ unspecified, ≤ 2020u4 ≥ unspecified, ≤ None

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38553
Advisory
https://helpx.adobe.com/security/products/framemaker/apsb22-42.html
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38553		Advisory
https://helpx.adobe.com/security/products/framemaker/apsb22-42.html		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Aug 11, 2022

Updated Apr 23, 2025

Reserved Jul 12, 2022

Link CVE-2022-35677

CISA Vulnrichment

Updated Apr 23, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-35677

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Aug 11, 2022

Updated Apr 23, 2025

Link EUVD-2022-38553

GitHub

No data