CVE-2026-21314

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in Adobe Audition 25.3 Allows Memory Disclosure

Publication date: 2026-02-10

Last updated on: 2026-02-11

Assigner: Adobe Systems Incorporated

Description

Audition versions 25.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-10

Last Modified

2026-02-11

Generated

2026-07-06

AI Q&A

2026-02-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-21314

EUVD

EUVD-2026-7066

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	audition	to 25.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability affects Adobe Audition versions 25.3 and earlier. It is an out-of-bounds read vulnerability, which means the software reads memory outside the intended boundaries. This can lead to exposure of sensitive information stored in memory. To exploit this vulnerability, an attacker needs the victim to open a malicious file, which triggers the memory exposure.

Impact Analysis

The impact of this vulnerability is the potential disclosure of sensitive information stored in memory. An attacker who successfully exploits this issue could gain access to confidential data without authorization. However, exploitation requires user interaction, specifically opening a malicious file.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate this vulnerability, avoid opening malicious files in affected versions of Audition (version 25.3 and earlier).

Consider updating to a later version of Audition if available, as the vulnerability affects versions 25.3 and earlier.

Educate users to be cautious about opening files from untrusted sources to prevent exploitation requiring user interaction.

Hi! I’m here to help you understand CVE-2026-21314. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70