Zscaler ThreatLabz Uncovers Adobe Acrobat Product Bugs

Zscaler ThreatLabz details five EMF parsing vulnerabilities in Adobe Acrobat (heap buffer overflows, use-after-free, out-of-bounds read, null pointer dereference) triggered by malformed EMF files and demonstrated with PoCs and crash dumps; Adobe addressed the issues in APSB22-16 and states Acrobat is secure by default because exploitation requires administrative registry changes to enable EMF-to-PDF conversion.