CVE-2024-39381
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@adobe.com (Secondary)
Description
After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected (2)
Products: Adobe: After Effects
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 23.6.9 |
| Running on/with | Platform Versions |
|---|---|
Apple Macos | All versions |
Microsoft Windows | All versions |
References (1)
Source: psirt@adobe.com
Vendor Advisory
Timeline
No history available yet.