CVSS 3.1 Score 7.8 of 10 (high)


Published Nov 16, 2023
Updated: Nov 22, 2023
CWE ID 125


CVE-2023-47040 is an out-of-bounds read vulnerability affecting Adobe Media Encoder versions 24.0.2 and earlier, as well as version 23.6 and earlier. This vulnerability occurs when parsing a crafted file, potentially resulting in a read past the end of an allocated memory structure. Exploitation of this vulnerability requires user interaction, where a victim must open a malicious file. An attacker could leverage this vulnerability to execute code in the context of the current user. The affected products include Adobe Media Encoder and several others. To remediate this vulnerability, users are advised to update their Adobe Media Encoder software to versions that are not affected by the issue. This vulnerability poses a high risk to organizations as it could lead to unauthorized code execution and potential compromise of confidentiality, integrity, and availability of systems or data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-47040 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options