CVE-2023-48632: ZDI-CAN-22172: Adobe After Effects AEP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48632?
CVE-2023-48632 is considered a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2023-48632?
To fix CVE-2023-48632, users should update Adobe After Effects to the latest version beyond 24.0.3 or 23.6.0.
What are the affected versions of Adobe After Effects in CVE-2023-48632?
CVE-2023-48632 affects Adobe After Effects versions 24.0.3 and earlier, as well as 23.6.0 and earlier.
Does CVE-2023-48632 require user interaction to exploit?
Yes, exploitation of CVE-2023-48632 requires user interaction.
What platforms are affected by CVE-2023-48632?
CVE-2023-48632 affects Adobe After Effects on both Windows and macOS, but the operating systems themselves are not vulnerable.