← Back

CVE-2021-28615

nvd nist
Published: Aug 24, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@adobe.com (Secondary)

Description

Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (1)

Products: Adobe: After Effects
1 product
After Effects
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Up to 18.2
Running on/withPlatform Versions
Microsoft
Windows
All versions

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.