TLDR InfoSec · STRATEGIES & TACTICS
CVE-2026-81983: INTEGER OVERFLOW VULNERABILITY ENABLES OUT-OF-BOUNDS WRITE IN ADOBE ACROBAT
Summary from the TLDR InfoSec newsletter
Remedio found an out-of-bounds write in Acrobat.dll. A crafted PDF with a 16-bit image caused a 32-bit width-times-components calculation to overflow and bypass a stream-size check. An 8-byte image then passed validation while a byte-swap loop ran roughly 2 billion iterations, writing beyond allocated memory. Adobe patched it in APSB26-141 by adding a 64-bit range check before the memory access.