Information disclosure via unchecked JP2 object

Use-after-free in JP2 image parsing in Adobe Acrobat Reader 21.007.20099 and earlier allows remote attackers to disclose process data via a malicious file. The parser performs operations on a JP2 object without first validating that the object exists, leaving stale object state accessible during image processing. Exploitation requires a victim to visit a malicious page or open a malicious file; the disclosure can support a separate code-execution chain in the current process.