CVE-2021-40754: Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40754?
CVE-2021-40754 is a memory corruption vulnerability in Adobe After Effects versions 18.4.1 and earlier, which can result in arbitrary code execution.
How does CVE-2021-40754 impact Adobe After Effects users?
CVE-2021-40754 can potentially allow an attacker to execute arbitrary code in the context of the current user by exploiting a memory corruption vulnerability in Adobe After Effects.
What is the severity rating for CVE-2021-40754?
CVE-2021-40754 has a severity rating of 7.8 out of 10, indicating a critical vulnerability.
What is the affected version of Adobe After Effects for CVE-2021-40754?
Adobe After Effects version 18.4.1 and earlier are affected by CVE-2021-40754.
How can users protect themselves from CVE-2021-40754?
To protect against CVE-2021-40754, users should update their Adobe After Effects software to version 18.4.2 or later, as recommended by Adobe.