Lucene search

PRIOn knowledge basePRION:CVE-2023-47071

HistoryNov 17, 2023 - 11:15 a.m.

Design/Logic Flaw

2023-11-1711:15:00

PRIOn knowledge base

www.prio-n.com

adobe after effects

out-of-bounds read vulnerability

memory disclosure

user interaction

6.1 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.2%

JSON

Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CPENameOperatorVersion
after_effectsge23.0
after_effectsle23.6
after_effectsge24.0
after_effectslt24.0.2

Name	Operator	Version
after_effects	ge	23.0
after_effects	le	23.6
after_effects	ge	24.0
after_effects	lt	24.0.2

References

helpx.adobe.com/security/products/after_effects/apsb23-66.html