Adobe Audition versions 25.3 and earlier contain an out-of-bounds write vulnerability that could allow an attacker to execute arbitrary code on the host system.

This is an out-of-bounds write vulnerability (CWE-787) triggered when a user opens a specially crafted malicious file. The vulnerability allows for arbitrary code execution in the context of the current user, requiring successful user interaction to initiate the attack.

Successful exploitation of this vulnerability could lead to a full compromise of the local user environment, potentially resulting in unauthorized data access, system modification, or persistence. Given the CVSS score of 7.8, this flaw represents a significant risk to organizational assets, particularly for users who frequently handle untrusted media files.

Immediate Action: Update Adobe Audition to version 25.6, 26.0, or later to incorporate the necessary security fixes.

Proactive Monitoring: Review endpoint security logs for unexpected process execution or abnormal file handling activities initiated by the Adobe Audition application.

Compensating Controls: Implement strict application control policies to restrict the ability of unauthorized or untrusted files to execute code if updates cannot be applied immediately.

Public Exploit Available: Unknown

This vulnerability presents a high risk due to the potential for arbitrary code execution. Organizations should prioritize updating all instances of Adobe Audition to the patched versions as soon as possible to neutralize the threat posed by malicious file handling.