---
id: CVE-2026-27269
title: >-
  Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read
  vulnerability when parsing a crafted file, which could result in a read past
  the end of an allocated memory structure
summary: >-
  Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read
  vulnerability when parsing a crafted file, which could result in a read past
  the end of an allocated memory structure. An attacker could leverage this
  vulnerabi…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-125
vendor: adobe
product: premiere_pro
affected:
  - premiere_pro < 25.6
patched:
  - premiere_pro 25.6
published: '2026-03-10'
updated: '2026-08-28'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-27269'
references:
  - url: 'https://helpx.adobe.com/security/products/premiere_pro/apsb26-28.html'
    label: psirt@adobe.com
tags:
  - nvd
epss: 0.00293
epssPercentile: 0.19538
ingestedAt: '2026-08-28T05:14:20.861Z'
---

## Overview

Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

## Affected

- `premiere_pro < 25.6`

## Remediation

Upgrade past the affected range:

- `premiere_pro 25.6`