Application DoS via out-of-bounds buffer access

Improper input validation in Adobe Acrobat Reader DC 21.007.20099 and earlier allows attackers to cause application denial-of-service via a malicious file. The Reader's file-processing code accesses memory beyond the end of a buffer when handling crafted input, and Adobe has not published a more specific function or parser locus. Exploitation requires a victim to open the file, so the bounded consequence is interruption of the Reader process rather than remote compromise.