CVE-2025-43580Access of Memory Location After End of Buffer in Adobe Audition

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 91.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 8

Description

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

NVDadobe/audition25.025.3+1
CVEListV5adobe/audition24.6.3

🔴Vulnerability Details

2
CVEList
Audition | Access of Memory Location After End of Buffer (CWE-788)2025-07-08
GHSA
GHSA-hjfr-x86r-5f57: Audition versions 252025-07-08
CVE-2025-43580 — Adobe Audition vulnerability | cvebase