CVE-2021-44191: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-44191?
CVE-2021-44191 is an out-of-bounds read vulnerability in Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) that could lead to disclosure of sensitive memory.
How does CVE-2021-44191 affect Adobe After Effects?
CVE-2021-44191 affects Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) by allowing an attacker to bypass mitigations such as ASLR and potentially disclose sensitive memory.
How can an attacker exploit CVE-2021-44191?
An attacker can exploit CVE-2021-44191 by leveraging the out-of-bounds read vulnerability in Adobe After Effects, requiring user interaction to exploit.
What is the severity of CVE-2021-44191?
CVE-2021-44191 has a severity rating of low with a CVSS score of 3.3.
How can I fix CVE-2021-44191?
To fix CVE-2021-44191, update Adobe After Effects to version 22.1.1 or later.