Skip to content
OpenAdvisories
High · 7.8 CVE-2021-42267 EUVD-2021-29243GHSA-rwj2-f84g-w7hc

Adobe Animate FLA File Parsing Memory Corruption Arbitrary Code Execution

Published Nov 18, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Adobe Animate unspecified – ≤ 21.0.9, unspecified – ≤ None —

References