CVE-2024-47456

Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

• CWE-125

• https://helpx.adobe.com/security/products/illustrator/apsb24-87.htmlVendor Advisory

Published

Nov 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47450Illustrator versions 28.7.1 and earlier are affected by a He…7.8
• CVE-2024-47451Illustrator versions 28.7.1 and earlier are affected by an o…7.8
• CVE-2024-47452Illustrator versions 28.7.1 and earlier are affected by an o…7.8
• CVE-2024-47453Illustrator versions 28.7.1 and earlier are affected by an o…5.5
• CVE-2024-47454Illustrator versions 28.7.1 and earlier are affected by an o…5.5
• CVE-2024-47455Illustrator versions 28.7.1 and earlier are affected by an o…5.5
• CVE-2024-47457Illustrator versions 28.7.1 and earlier are affected by a NU…5.5
• CVE-2024-47458Bridge versions 13.0.9, 14.1.2 and earlier are affected by a…5.5
• CVE-2024-47459Substance3D - Sampler versions 4.5 and earlier are affected …5.5
• CVE-2024-4746Missing Authorization vulnerability in netgsm Netgsm netgsm …6.3
• CVE-2024-47460Command injection vulnerability in the underlying CLI servic…9
• CVE-2024-47461An authenticated command injection vulnerability exists in t…7.2