CVE-2024-45145

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 9, 2024
Updated: Oct 18, 2024
CWE ID 125

Summary

CVE-2024-45145 is a newly disclosed vulnerability that affects Adobe Lightroom Desktop versions 7.4.1, 13.5, and 12.5.1, and older releases. This issue involves an out-of-bounds read vulnerability which, if exploited, could result in the disclosure of sensitive memory content. This memory disclosure could potentially enable an attacker to bypass security mitigations like Address Space Layout Randomization (ASLR). It is important to note that for an attacker to successfully exploit this vulnerability, the victim must open a malicious file, requiring user interaction.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share