CVE-2019-8017

CRITICAL

Adobe Acrobat and Reader DC < 19.012.20036 - Untrusted Pointer Dereference

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-8017. PoCs published by Google Security Research.

AI-analyzed exploit summary The writeup describes a vulnerability in AFDKO (Adobe Font Development Kit for OpenType) where the FDArray can be truncated to zero elements, leading to an out-of-bounds access when referencing uninitialized structures. This can result in arbitrary code execution when processing maliciously crafted font files in Adobe Acrobat.

Description

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Exploits (1)

exploitdb WRITEUP VERIFIED
by Google Security Research · textdoswindows
https://www.exploit-db.com/exploits/47260

The writeup describes a vulnerability in AFDKO (Adobe Font Development Kit for OpenType) where the FDArray can be truncated to zero elements, leading to an out-of-bounds access when referencing uninitialized structures. This can result in arbitrary code execution when processing maliciously crafted font files in Adobe Acrobat.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Adobe Acrobat (with embedded AFDKO in CoolType.dll, Acrobat.dll, AdobePDFL.dll)
No auth needed
Prerequisites: Maliciously crafted font file embedded in a PDF or other document format processed by Adobe Acrobat
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
https://helpx.adobe.com/security/products/acrobat/apsb19-41.html

Scores

CVSS v3 9.8
EPSS 0.1333
EPSS Percentile 95.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (4)
adobe/acrobat_dc 15.006.30060 - 15.006.30499
adobe/acrobat_dc 15.008.20082 - 19.012.20036
adobe/acrobat_reader_dc 15.006.30060 - 15.006.30499
adobe/acrobat_reader_dc 15.008.20082 - 19.012.20036
Published Aug 20, 2019
Tracked Since Feb 18, 2026