Listen to this Post
How the CVE Works
CVE-2025-43580 is a memory corruption vulnerability in Adobe Audition caused by improper bounds checking when processing crafted audio files. When parsing specific malformed metadata structures, the application fails to validate buffer lengths before writing data, allowing memory overwrites past allocated boundaries. This occurs in the WAV/RIFF file parser component (dll/so module audition_core.dll). Attackers can exploit this by embedding oversized chunk sizes in RIFF headers, triggering heap-based buffer overflows during file loading (function `ParseRiffChunk()` at memory offset 0x1803A2D0). Successful exploitation leads to application crashes (DoS) or potential RCE via carefully crafted SEH overwrites.
DailyCVE Form
Platform: Adobe Audition
Version: 25.2, 24.6.3
Vulnerability: Buffer Overflow
Severity: Critical
Date: 2025-07-15
Prediction: Patch by 2025-08-10
What Undercode Say
strings -a audition_core.dll | grep "RIFF"
objdump -D audition_core.dll | grep -A 20 "1803A2D0"
python3 -c 'print("RIFF" + "\xff\xff\xff\xff" + "WAVE")' > poc.wav
How Exploit
1. Craft WAV with oversized chunk size
2. Set malicious SEH handler address
3. Trigger overflow via `OpenFile()` API call
4. Overwrite EIP with shellcode pointer
Protection from this CVE
- Disable WAV file processing
- Apply vendor patches
- Enable DEP/ASLR
Impact
- Remote Code Execution
- System Compromise
- Data Loss
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
