Out-of-bounds reads in Adobe Acrobat; Foxit PDF Reader contains vulnerability that could lead to SYSTEM-level privileges

Cisco Talos published a vulnerability roundup detailing multiple disclosed and patched issues: two out-of-bounds read flaws in Adobe Acrobat Reader that can leak process memory; a Foxit Reader updater certification flaw enabling local privilege escalation; several buffer overflows and reads in the libigl geometry library; and numerous high-severity vulnerabilities in AutomationDirect P3 PLC CPUs (including RCE-capable stack/heap overflows and write-what-where conditions) that could impact ICS/critical infrastructure. Vendors have issued patches and CISA provided guidance for the PLC vulnerabilities.