CVE-2024-47444
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 12, 2024
Updated: Nov 14, 2024
CWE ID 125
Summary
CVE-2024-47444 is a newly disclosed vulnerability affecting Adobe After Effects versions 23.6.9 and earlier, as well as 24.6.2. This issue represents an out-of-bounds read vulnerability, allowing an attacker to access sensitive memory content. By exploiting this flaw, an adversary could potentially bypass security mitigations like Address Space Layout Randomization (ASLR). However, it's important to note that successful exploitation requires user interaction, meaning a victim must open a malicious file before the vulnerability can be leveraged.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe After Effects
Affected Vendors
- Adobe