CVE-2024-30298: Adobe Animate SWF File Parsing Memory corruption
First published: Thu May 16 2024(Updated: )
Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Adobe Animate | >=23.0.0<23.0.6 | |
| Adobe Animate | >=24.0.0<24.0.3 | |
| Any of | ||
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-30298?
CVE-2024-30298 is classified as a moderate severity vulnerability due to its potential for sensitive memory disclosure.
How do I fix CVE-2024-30298?
To address CVE-2024-30298, update Adobe Animate to the latest version that resolves the out-of-bounds read vulnerability.
What software versions are vulnerable to CVE-2024-30298?
Adobe Animate versions 24.0.2, 23.0.5 and earlier are vulnerable to CVE-2024-30298.
Can CVE-2024-30298 be exploited remotely?
CVE-2024-30298 requires user interaction for exploitation, making it less likely to be exploited remotely.
What type of vulnerability is CVE-2024-30298?
CVE-2024-30298 is an out-of-bounds read vulnerability that can lead to memory disclosure.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/adobe animate
- version/adobe animate/23.0.0
- version/adobe animate/24.0.0
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows