← Back

CVE-2024-45145

nvd nist
Published: Oct 9, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@adobe.com (Secondary)

Description

Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected (3)

Products: Adobe: Lightroom
1 product
Lightroom
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Before 7.5
Before 12.5.1
From 13.0 to 13.5.1

References (1)

Timeline

No history available yet.