Summary: Cisco Talos has disclosed vulnerabilities affecting Miniaudio and Adobe Acrobat, all of which have been addressed by their respective vendors. The vulnerabilities include out-of-bounds write and read issues, as well as memory corruption that could lead to arbitrary code execution. Users are advised to update their systems and download the latest Snort rule sets for protection against these threats.

Affected: Miniaudio, Adobe Acrobat

Keypoints :

• Vulnerabilities disclosed include TALOS-2024-2063 (CVE-2024-41147) for Miniaudio, and multiple CVEs for Adobe Acrobat: TALOS-2025-2134 (CVE-2025-27163), TALOS-2025-2136 (CVE-2025-27164), and TALOS-2025-2135 (CVE-2025-27158).
• The Miniaudio vulnerability can cause a buffer overflow when handling specially crafted FLAC files.
• Adobe Acrobat vulnerabilities involve out-of-bounds reads and a memory corruption issue that may lead to arbitrary code execution via malicious PDF files.