CVE-2025-27184: After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27184?
CVE-2025-27184 is classified as a critical vulnerability due to its potential to disclose sensitive memory.
How do I fix CVE-2025-27184?
To fix CVE-2025-27184, update Adobe After Effects to version 25.1 or later, or ensure you are using version 24.6.5 or newer.
What versions of Adobe After Effects are affected by CVE-2025-27184?
CVE-2025-27184 affects Adobe After Effects versions 25.1, 24.6.4, and earlier.
What are the risks associated with CVE-2025-27184?
The risks associated with CVE-2025-27184 include potential disclosure of sensitive memory data and the ability to bypass security mitigations like ASLR.
Is user interaction needed for the exploitation of CVE-2025-27184?
Yes, exploitation of CVE-2025-27184 requires user interaction.