CVE-2026-48291 is a heap-based buffer overflow vulnerability affecting Adobe Format Plugins versions 1.1.2 and earlier. The vulnerability arises when a user opens a maliciously crafted file, potentially leading to arbitrary code execution under the current user's privileges. The CVSS 3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been published yet, and no known exploits in the wild have been reported.

Successful exploitation can lead to arbitrary code execution with the privileges of the current user, potentially compromising confidentiality, integrity, and availability of the affected system. Since exploitation requires user interaction, the risk is mitigated by user caution but remains significant due to the high impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening files from untrusted sources with Adobe Format Plugins version 1.1.2 or earlier.