Description
An Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This vulnerability occurs because of computation that reads data that is past the end of the target buffer. The use of an invalid (out-of-range) pointer offset during access of internal data structure fields causes the vulnerability. A successful attack can lead to sensitive data exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Adobe Flash Player before 28.0.0.137 | Adobe Flash Player before 28.0.0.137 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | flash-plugin | 28.0.0.137-1.el6_9 | RHSA-2018:0081 |
Advisories 1
- RHSA-2018:0081 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- https://helpx.adobe.com/security/products/flash-player/apsb18-01.html
- RHSA-2018:0081 vendor-advisory
- 102465 vdb-entry
- 1040155 vdb-entry