CVE-2017-16385

CVE-2017-16385 is a high-severity buffer access vulnerability in Adobe Acrobat and Reader, affecting multiple versions. It arises from incorrect length values during TIFF parsing in XPS conversion, where a crafted TIFF image can cause a mismatch between allocated buffer size and allowed access. This flaw can lead to arbitrary code execution if an attacker can control accessible memory. With a CVSS score of 8.8, it has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, the vulnerability has garnered significant community discussion and media coverage.