Memory disclosure via stale Doc object access

Use-after-free in Doc object handling in Adobe Acrobat Reader allows attackers to disclose process memory through a malicious file. The parser operates on a Doc object without first validating that the object still exists, leaving a stale object reference accessible. Exploitation requires a victim to open the crafted file or visit a malicious page; the disclosure can expose address data used to bypass ASLR, while code execution requires another flaw.