CVE-2024-20772: Adobe Media Encoder 2024 AI file parsing Stack based buffer overflow
Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20772?
CVE-2024-20772 is classified as a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-20772?
To fix CVE-2024-20772, update Adobe Media Encoder to version 24.3 or later, or to version 23.6.5 or later.
What versions of Adobe Media Encoder are affected by CVE-2024-20772?
Adobe Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by CVE-2024-20772.
What is the impact of CVE-2024-20772 if exploited?
If exploited, CVE-2024-20772 could lead to arbitrary code execution in the context of the current user.
Is user interaction required to exploit CVE-2024-20772?
Yes, exploitation of CVE-2024-20772 requires user interaction, specifically the victim must open a malicious file.