CVE-2025-54278 MEDIUM

CVE-2025-54278: Bridge | Heap-based Buffer Overflow (CWE-122)

Vendor Adobe
Product Bridge
Weakness CWE-122
Published October 15, 2025
Last update October 15, 2025

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Key dates

02Disclosure timeline

October 15, 2025 CVE published
October 15, 2025 Record updated