CVE-2017-16374

CVE-2017-16374 is a high-severity buffer over-read vulnerability in the JPEG 2000 module of Adobe Acrobat and Reader, affecting multiple versions including 2017.012.20098 and earlier. This flaw allows an attacker to craft a malicious JPEG 2000 input code stream, leading to out-of-bounds memory access and potential disclosure of sensitive information like object heap addresses. With a CVSS score of 8.8 (High), it can be exploited remotely with low attack complexity, requiring user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered some community discussion and media coverage, indicating awareness of its potential impact.