ZDI-CAN-22174: ZDI-23-1782: Adobe After Effects AEP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe After Effects. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2023-48635.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22174?
ZDI-CAN-22174 has a moderate severity level due to its potential for sensitive information disclosure.
How do I fix ZDI-CAN-22174?
To fix ZDI-CAN-22174, ensure that you update Adobe After Effects to the latest version provided by Adobe.
What types of attacks can exploit ZDI-CAN-22174?
ZDI-CAN-22174 can be exploited through social engineering, where attackers trick users into visiting malicious pages or opening harmful files.
What versions of Adobe After Effects are affected by ZDI-CAN-22174?
ZDI-CAN-22174 affects Adobe After Effects installations, specifically including version 2025.
Is user interaction required to exploit ZDI-CAN-22174?
Yes, user interaction is required for exploiting ZDI-CAN-22174, as the target must engage with a malicious page or file.