How severe is CVE-2025-43580?

CVE-2025-43580 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2025-43580 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (12th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-43580?

CVE-2025-43580 affects Adobe Audition. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-43580?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-43580 have an EU (EUVD) identifier?

Yes. CVE-2025-43580 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-20676.

When was CVE-2025-43580 published?

CVE-2025-43580 was published on 2025-07-08 and last updated on 2026-06-17.

CVE-2025-43580

CVE-2025-43580 is a medium-severity vulnerability in Adobe Audition with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-788.

Key facts

Severity: Medium (CVSS 3.x base score 5.5)
EPSS exploit prediction: 0% (12th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-20676
Weakness: CWE-788
Affected product: Adobe Audition
Published: 2025-07-08
Last modified: 2026-06-17

Description

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Frequently asked questions

What is CVE-2025-43580?: Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
How severe is CVE-2025-43580?: CVE-2025-43580 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2025-43580 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (12th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-43580?: CVE-2025-43580 affects Adobe Audition. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-43580?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-43580 have an EU (EUVD) identifier?: Yes. CVE-2025-43580 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-20676.
When was CVE-2025-43580 published?: CVE-2025-43580 was published on 2025-07-08 and last updated on 2026-06-17.

References

https://helpx.adobe.com/security/products/audition/apsb25-56.html

Affected products (1)

cpe:2.3:a:adobe:audition:*:*:*:*:*:*:*:*

More vulnerabilities in Adobe Audition

CVE-2011-0615 — Critical (CVSS 9.3): Multiple buffer overflows in Adobe Audition 3.0.1 and earlier allow remote attackers to execute arbitrary code or cause…
CVE-2011-0614 — Critical (CVSS 9.3): Buffer overflow in Adobe Audition 3.0.1 and earlier allows remote attackers to cause a denial of service (memory…
CVE-2026-21312 — High (CVSS 7.8): Audition versions 25.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary…
CVE-2024-39378 — High (CVSS 7.8): Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds write vulnerability that could result in…
CVE-2024-20739 — High (CVSS 7.8): Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could…
CVE-2021-40740 — High (CVSS 7.8): Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file,…

All CVEs affecting Adobe Audition →

Other CWE-788 vulnerabilities

CVE-2021-27384 — Critical (CVSS 9.8): A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All…
CVE-2024-20402 — High (CVSS 8.6): A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat…
CVE-2024-20330 — High (CVSS 8.6): A vulnerability in the Snort 2 and Snort 3 TCP and UDP detection engine of Cisco Firepower Threat Defense (FTD)…
CVE-2024-27829 — High (CVSS 7.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may…
CVE-2021-42735 — High (CVSS 7.8): Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer…
CVE-2021-42732 — High (CVSS 7.8): Access of Memory Location After End of Buffer (CWE-788)

Browse all CWE-788 vulnerabilities →