First published: Thu Nov 16 2023(Updated: )
Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
|Affected Software||Affected Version||How to fix|
The vulnerability ID for this Adobe Bridge vulnerability is CVE-2023-44327.
The title of this vulnerability is ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability.
Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by this vulnerability.
The severity of CVE-2023-44327 is medium with a severity value of 5.5.
This vulnerability can be exploited to disclose sensitive memory and bypass mitigations such as ASLR.