Illustrator versions 28.7.6, 29.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
                
            References
                    | Link | Resource | 
|---|---|
| https://helpx.adobe.com/security/products/illustrator/apsb25-65.html | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| AND | 
 
 | 
History
                    10 Jul 2025, 17:29
| Type | Values Removed | Values Added | 
|---|---|---|
| First Time | Microsoft Apple Microsoft windows Adobe illustrator Adobe Apple macos | |
| CPE | cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | |
| References | () https://helpx.adobe.com/security/products/illustrator/apsb25-65.html - Vendor Advisory | 
10 Jul 2025, 13:18
| Type | Values Removed | Values Added | 
|---|---|---|
| Summary | 
 | 
08 Jul 2025, 22:15
| Type | Values Removed | Values Added | 
|---|---|---|
| New CVE | 
Information
                Published : 2025-07-08 22:15
Updated : 2025-07-10 17:29
NVD link : CVE-2025-49524
Mitre link : CVE-2025-49524
CVE.ORG link : CVE-2025-49524
JSON object : View
Products Affected
                adobe
- illustrator
apple
- macos
microsoft
- windows
CWE
                
                    
                        
                        CWE-476
                        
            NULL Pointer Dereference
