CVE-2025-54278
📊 5.5 MEDIUM⚡ 0.0%🎯 0 exploits
📅 Published Oct 15, 2025
📋 Status: Analyzed
Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS v3.1 • [email protected]
🎯 Affected Products & Systems
4 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String |
|---|---|---|---|---|---|
📱App | adobe | bridge | < 14.1.9 | Vulnerable | cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* |
📱App | adobe | bridge | ≥ 15.0 ∧ < 15.1.2 | Vulnerable | cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:* |
💻OS | apple | macos | All versions | Not Vulnerable | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
💻OS | microsoft | windows | All versions | Not Vulnerable | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
Version: ≥ 15.0 ∧ < 15.1.2
CPE:
cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
NONE
User Interaction:
REQUIRED
Confidentiality:
HIGH
Integrity:
NONE
Availability:
NONE
Scope:
UNCHANGED
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
5.5 (MEDIUM)v3.1
Source: [email protected]
EPSS Details
0.0% (Minimal)4.7th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
Oct 15, 2025 (17 days ago)
Last Modified
Oct 17, 2025 (14 days ago)
Security Weaknesses1
CWE-122
References2
NVDgeneral