CVE-2022-34249— Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-34249
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
堆缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe InCopy 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe InCopy是美国Adobe公司的一款用于创作的文本编辑软件。 Adobe InCopy 17.2及以前版本和16.4.1及以前版本存在安全漏洞，该漏洞源于受基于堆的缓冲区溢出漏洞影响，可能导致在当前用户的上下文中执行任意代码。利用这一问题需要用户互动，即受害者必须打开一个恶意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-34249
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-34249
请登录查看更多情报信息。
- https://helpx.adobe.com/security/products/incopy/apsb22-29.htmlx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-34249
Same Patch Batch · Adobe · 2022-07-15 · 32 CVEs total
| CVE-2022-34215 | 7.8 HIGH | Adobe Acrobat Reader DC Annotation Polygon Out-Of-Bounds Read Remote Code Execution Vulner |
| CVE-2022-34217 | 7.8 HIGH | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabili |
| CVE-2022-34223 | 7.8 HIGH | Adobe Acrobat Reader DC AcroForm currentValueIndices Use-After-Free Remote Code Execution |
| CVE-2022-34222 | 7.8 HIGH | Adobe Acrobat Reader DC query Out-Of-Bounds Read Remote Code Execution Vulnerability |
| CVE-2022-34225 | 7.8 HIGH | Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution Vulnera |
| CVE-2022-34226 | 7.8 HIGH | Adobe Acrobat Reader DC PDF Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
| CVE-2022-34229 | 7.8 HIGH | Adobe Acrobat Reader DC AcroForm rect Use-After-Free Remote Code Execution Vulnerability |
| CVE-2022-34243 | 7.8 HIGH | Adobe Photoshop U3D File Parsing Use-After-Free Remote Code Execution Vulnerability |
| CVE-2022-34241 | 7.8 HIGH | Adobe Character Animator SVG File Parsing Heap-based Buffer Overflow Remote Code Execution |
| CVE-2022-34242 | 7.8 HIGH | Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnera |
| CVE-2022-34228 | 7.8 HIGH | Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerab |
| CVE-2022-34230 | 7.8 HIGH | Adobe Acrobat Reader Use After Free could lead to Arbitrary code execution |
| CVE-2022-34252 | 5.5 MEDIUM | Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2022-34234 | 5.5 MEDIUM | Adobe Acrobat Reader DC Doc printWithParams Use-After-Free Information Disclosure Vulnerab |
| CVE-2022-34232 | 5.5 MEDIUM | Adobe Acrobat Reader DC Annotation print Use-After-Free Information Disclosure Vulnerabili |
| CVE-2022-34237 | 5.5 MEDIUM | Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability |
| CVE-2022-34236 | 5.5 MEDIUM | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili |
| CVE-2022-34233 | 5.5 MEDIUM | Adobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure Vulnerability |
| CVE-2022-34239 | 5.5 MEDIUM | Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerabili |
| CVE-2022-34244 | 5.5 MEDIUM | Adobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure Vu |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
Same weakness: CWE-122
- CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8213
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow - CVE-2026-8212
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow - CVE-2026-42309
Pillow: Heap buffer overflow with nested list coordinates - CVE-2026-45130
Vim: Heap Buffer Overflow in spell file loading
V. Comments for CVE-2022-34249
No comments yet