CVE-2025-43580 MEDIUM

CVE-2025-43580: Audition | Access of Memory Location After End of Buffer (CWE-788)

Vendor Adobe
Product Audition
Weakness CWE-788
Published July 8, 2025
Last update July 9, 2025
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Key dates

02Disclosure timeline

July 8, 2025 CVE published
July 9, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-40770 Adobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution CVE-2021-40751 Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution CVE-2021-40787 Adobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code execution CVE-2022-1451 Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2 CVE-2021-40775 Adobe Prelude SVG File Parsing Memory Corruption Arbitrary Code Execution