CVE-2024-20737: Adobe After Effect 2024 RGB File parsing Memory Corruption Vulnerability
After Effects versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20737?
CVE-2024-20737 is classified as a medium severity vulnerability due to the potential risk of sensitive memory disclosure.
How do I fix CVE-2024-20737?
To mitigate CVE-2024-20737, users should update Adobe After Effects to version 24.2 or later immediately.
What versions of After Effects are affected by CVE-2024-20737?
CVE-2024-20737 affects Adobe After Effects versions 24.1, 23.6.2, and earlier versions that are below 24.2.
What type of vulnerability is CVE-2024-20737?
CVE-2024-20737 is an out-of-bounds read vulnerability that can lead to the disclosure of sensitive information.
Does exploitation of CVE-2024-20737 require user interaction?
Yes, exploitation of CVE-2024-20737 requires user interaction, making it an attack vector that relies on user activity.