CVE-2019-8196

CRITICAL

Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Untrusted Pointer Dereference

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-8196. PoCs published by Google Security Research.

AI-analyzed exploit summary The provided content is a detailed analysis of an access violation exception in Adobe Acrobat Reader DC, caused by a malformed PDF file. The crash occurs due to dereferencing an uninitialized pointer from the heap, with specific bytes in the embedded OpenType font's CharString triggering the issue.

Description

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution .

Exploits (1)

exploitdb WRITEUP VERIFIED

by Google Security Research · textdoswindows

https://www.exploit-db.com/exploits/47610

View Code ZIP pw:eip

The provided content is a detailed analysis of an access violation exception in Adobe Acrobat Reader DC, caused by a malformed PDF file. The crash occurs due to dereferencing an uninitialized pointer from the heap, with specific bytes in the embedded OpenType font's CharString triggering the issue.

Classification

Writeup 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Adobe Acrobat Reader DC (2019.012.20036)

No auth needed

Prerequisites: Malformed PDF file with specific bytes in the embedded OpenType font

MITRE ATT&CK

T1499.004 - Application or System Exploitation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://helpx.adobe.com/security/products/acrobat/apsb19-49.html

Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/155225/Adobe-Acrobat-Reader-DC-For-Windows-Malformed-OTF-Font-Uninitialized-Pointer.html

Scores

CVSS v3 9.8

EPSS 0.2289

EPSS Percentile 97.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (4)

adobe/acrobat_dc 15.006.30060 - 15.006.30504

adobe/acrobat_dc 15.008.20082 - 19.021.20047

adobe/acrobat_reader_dc 15.006.30060 - 15.006.30504

adobe/acrobat_reader_dc 15.008.20082 - 19.021.20047

Published Oct 17, 2019

Tracked Since Feb 18, 2026