First published: Thu Nov 18 2021(Updated: )
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe After Effects 2025 | <=18.4.1 | |
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-40753 is a memory corruption vulnerability in Adobe After Effects version 18.4.1 and earlier.
CVE-2021-40753 can potentially result in arbitrary code execution in the context of the current user when a malicious SVG file is opened in Adobe After Effects.
CVE-2021-40753 has a severity rating of 7.8 (Critical).
The vulnerability can be exploited by an attacker crafting a malicious SVG file and enticing a user to open it in Adobe After Effects.
Yes, Adobe has released a security update to address the memory corruption vulnerability in Adobe After Effects.