CVE-2015-8448: Use After Free
Use-after-free vulnerability in the DisplacementMapFilter object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a crafted mapBitmap property value, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8448?
CVE-2015-8448 has been rated as important due to its potential to allow remote code execution.
How do I fix CVE-2015-8448?
To fix CVE-2015-8448, update Adobe Flash Player to version 18.0.0.268 or later for Windows and OS X, or to version 11.2.202.554 or later for Linux.
Which versions of Adobe products are affected by CVE-2015-8448?
CVE-2015-8448 affects Adobe Flash Player versions before 18.0.0.268, 19.x before 20.0.0.228, and Adobe AIR before 20.0.0.204.
What is a use-after-free vulnerability like CVE-2015-8448?
A use-after-free vulnerability occurs when a program continues to use a pointer after the object it points to has been freed, potentially allowing attackers to exploit the vulnerability.
Are all operating systems vulnerable to CVE-2015-8448?
CVE-2015-8448 primarily affects Adobe Flash Player and Adobe AIR on Windows and macOS, with no vulnerabilities reported for Linux Kernel or mobile operating systems.