First published: Tue Jun 08 2021(Updated: )
Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe After Effects | <=18.2 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Adobe After Effects vulnerability is CVE-2021-28616.
The severity of CVE-2021-28616 vulnerability is high, with a severity value of 7.1.
This vulnerability affects Adobe After Effects version 18.2 (and earlier).
An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service.
To fix this vulnerability, update Adobe After Effects to a version later than 18.2.