CVE-2026-21324: After Effects | Out-of-bounds Read (CWE-125)
After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21324?
CVE-2026-21324 has a high severity rating due to its ability to allow out-of-bounds read operations, potentially leading to memory corruption.
How do I fix CVE-2026-21324?
To fix CVE-2026-21324, update Adobe After Effects to version 25.7 or later.
What systems are affected by CVE-2026-21324?
CVE-2026-21324 affects Adobe After Effects versions 25.6 and earlier on both Windows and macOS.
What type of vulnerability is CVE-2026-21324?
CVE-2026-21324 is classified as an out-of-bounds read vulnerability, which falls under CWE-125.
Can CVE-2026-21324 lead to code execution?
Yes, an attacker could potentially leverage CVE-2026-21324 to execute arbitrary code by exploiting the out-of-bounds read.