Skip to content
OpenAdvisories
High NCSC-2025-0163 5 CVEs

Kwetsbaarheden verholpen in Adobe Animate

Published May 14, 2025 · Updated May 14, 2025 · nl

Vendor: Adobe Product: Animate Product: animate_2024

Summary

Adobe heeft kwetsbaarheden verholpen in Animate versies 24.0.8, 23.0.11 en eerder.

Details

Interpretaties
De kwetsbaarheden omvatten onder andere een kritieke kwetsbaarheid die willekeurige code-executie mogelijk maakt via een out-of-bounds write, een NULL Pointer Dereference die kan leiden tot applicatiecrashes, en verschillende integer gerelateerde kwetsbaarheden die ook willekeurige code-executie kunnen toestaan. De exploitatie van deze kwetsbaarheden vereist gebruikersinteractie, specifiek door het openen van kwaadwillig vervaardigde bestanden.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 5

  • High 7.8
    CVE-2025-30328

    Animate | Out-of-bounds Write (CWE-787)

    Animate versions 24.0.8, 23.0.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

    Adobe Animate
  • High 7.8
    CVE-2025-43555

    Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that…

    Adobe Animate
  • High 7.8
    CVE-2025-43556

    Animate | Integer Overflow or Wraparound (CWE-190)

    Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victi…

    Adobe Animate
  • High 7.8
    CVE-2025-43557

    Animate | Access of Uninitialized Pointer (CWE-824)

    Animate versions 24.0.8, 23.0.11 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

    Adobe Animate
  • Medium 5.5
    CVE-2025-30329

    Animate | NULL Pointer Dereference (CWE-476)

    Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Explo…

    Adobe Animate

Revision history

  1. #1.0.0

    Initiele versie

References