Skip to content
OpenAdvisories
High NCSC-2026-0153 4 CVEs

Kwetsbaarheden verholpen in Adobe After Effects

Published May 13, 2026 · Updated May 13, 2026 · nl

Vendor: Adobe Product: After Effects

Summary

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe After Effects, specifiek in versies 26.0, 25.6.4 en eerdere versies.

Details

Interpretaties
De kwetsbaarheden bevinden zich in de wijze waarop Adobe After Effects bepaalde bestanden verwerkt. Er is sprake van een stack-based buffer overflow, een heap-based buffer overflow, een out-of-bounds write en een Integer Overflow. Deze fouten leiden tot geheugenbeschadiging wanneer een gebruiker een speciaal vervaardigd kwaadaardig bestand opent. Een aanvaller kan hierdoor mogelijk willekeurige code uitvoeren binnen de context van de kwetsbare applicatie. De kwetsbaarheden treffen meerdere recente versies van Adobe After Effects.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 4

  • High 7.8
    CVE-2026-34642

    After Effects | Heap-based Buffer Overflow (CWE-122)

    After Effects versions 26.0, 25.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim …

    Adobe After Effects
  • High 7.8
    CVE-2026-34643

    After Effects | Out-of-bounds Write (CWE-787)

    After Effects versions 26.0, 25.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must o…

    Adobe After Effects
  • High 7.8
    CVE-2026-34644

    After Effects | Integer Overflow or Wraparound (CWE-190)

    After Effects versions 26.0, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vi…

    Adobe After Effects
  • High 7.8
    CVE-2026-34690

    After Effects | Stack-based Buffer Overflow (CWE-121)

    After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

    Adobe After Effects

Revision history

  1. #1.0.0

    Initiele versie

References

  • Reference
    https://helpx.adobe.com/security/products/after_effects/apsb26-48.html