CVE-2021-28611: Adobe After Effects Out-of-bounds Read vulnerability
Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-28611?
CVE-2021-28611 is an Out-of-bounds Read vulnerability affecting Adobe After Effects version 18.2 and earlier.
What is the severity level of CVE-2021-28611?
CVE-2021-28611 has a severity level of 7.1 (high).
How does CVE-2021-28611 affect Adobe After Effects?
CVE-2021-28611 allows an unauthenticated attacker to disclose sensitive memory information and cause a denial of service in the context of the current user.
How can an attacker exploit CVE-2021-28611?
An attacker can exploit CVE-2021-28611 by crafting a specially designed file that triggers the out-of-bounds read vulnerability when parsed by Adobe After Effects.
Is Microsoft Windows affected by CVE-2021-28611?
No, Microsoft Windows is not affected by CVE-2021-28611.