A critical out-of-bounds read vulnerability in Adobe Format Plugins allows for potential remote code execution through the processing of malicious files.

This vulnerability is an out-of-bounds read (CWE-125) triggered when the software parses a malformed file. Exploitation requires user interaction, specifically the opening of a malicious file, which allows an attacker to execute code in the context of the current user.

The ability for an attacker to achieve code execution poses a significant risk to organizational data integrity and system confidentiality. Given the CVSS score of 7.8, this vulnerability is classified as High severity, as it could lead to complete system compromise if the user running the application possesses elevated privileges.

Immediate Action: Update Adobe Format Plugins to the latest version provided by the vendor at https://helpx.adobe.com/security/products/formatplugins/apsb25-114.html.

Proactive Monitoring: Monitor endpoint security logs for unauthorized process execution or anomalous behavior originating from the Format Plugins application.

Compensating Controls: Implement strict email and file-sharing security policies to scan incoming documents for malicious content before they reach end-user workstations.

Public Exploit Available: No (exploit_available: false)

Due to the potential for arbitrary code execution, this vulnerability represents a significant security risk. Organizations should prioritize patching all affected instances of Adobe Format Plugins. Users should be cautioned against opening suspicious or untrusted files until the software has been successfully updated to a patched version.