Skip to content
OpenAdvisories
Medium · 4.3 CVE-2021-28587 EUVD-2021-15256GHSA-mwf8-8q3h-4wp8

Adobe After Effects TIF file parsing out-of-bounds read information disclosure vulnerability

Published Jun 28, 2021 · Updated Sep 17, 2024 · Assigned by adobe

Description

After Effects versions 18.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe After Effects unspecified – ≤ 18.0, unspecified – ≤ None —

References