Product:
Illustrator
Summary
Illustrator on iPad versions 3.0.9 and earlier are affected by an Integer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-61826 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that triggers the Integer Underflow condition when opened in Illustrator on an affected iPad version. The victim must then be tricked into opening this file, which can lead to arbitrary code execution with the privileges of the current user.
Affected Products
- Illustrator on iPad versions 3.0.9 and earlier: Vulnerable to Integer Underflow leading to potential arbitrary code execution.
Mitigation
Users are advised to update to the latest version of Illustrator on iPad to mitigate this vulnerability. Additionally, avoid opening files from untrusted sources to reduce the risk of exploitation.