CVE-2021-40753: Adobe After Effects SVG File Parsing Memory Corruption Arbitrary Code Execution
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40753?
CVE-2021-40753 is a memory corruption vulnerability in Adobe After Effects version 18.4.1 and earlier.
How does CVE-2021-40753 affect Adobe After Effects?
CVE-2021-40753 can potentially result in arbitrary code execution in the context of the current user when a malicious SVG file is opened in Adobe After Effects.
What is the severity of CVE-2021-40753?
CVE-2021-40753 has a severity rating of 7.8 (Critical).
How can the vulnerability be exploited?
The vulnerability can be exploited by an attacker crafting a malicious SVG file and enticing a user to open it in Adobe After Effects.
Is there a fix available for CVE-2021-40753?
Yes, Adobe has released a security update to address the memory corruption vulnerability in Adobe After Effects.