Netskope Threat Labs

FILE-PDF Adobe Acrobat Reader out-of-bounds read attempt detected

IPS-CFWIPS-SWG

8 SIDs: 152149, 152150, 152157, 152160, 152168, 160176, 160179, 160180

Detects PDFs exploiting a run of out-of-bounds read vulnerabilities in Adobe Acrobat Reader, including CVE-2025-24431, CVE-2025-27164, and several 2026 advisories, which can leak memory. The rule matches the crafted page structures and script references that public exploits use to read beyond allocated buffers.