CVE-2023-47053 ZDI-CAN-21689: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2023-47054

Summary: CVE-2023-47054 affects Adobe Audition 24.0 and earlier, and 23.6.1 and earlier, due to an Access of Uninitialized Pointer vulnerability that can disclose memory and bypass ASLR. Exploitation is user-interaction dependent (victim opens a malicious file). Related connected reports describe...

CVE-2023-47052

Adobe Audition 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read during MP4 file parsing that can disclose memory and, per the CVE-2023-47052 entry, bypass mitigations such as ASLR. Exploitation requires user interaction (opening a malicious file). This CVE is one ...

CVE-2023-47052 ZDI-CAN-21687: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Audition version 24.0 and earlier and 23.6.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-44334

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-44335

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-44332

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-44327

Adobe Bridge versions 13.0.4 and earlier and 14.0.0 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2023-44331

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Design/Logic Flaw

Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

Design/Logic Flaw

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Design/Logic Flaw

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Design/Logic Flaw

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-47044

Summary of CVE-2023-47044 (Adobe Media Encoder): A vulnerability in Adobe Media Encoder 24.0.2 and earlier and 23.6 and earlier is an Access of Uninitialized Pointer that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction: a victim must open a mali...

CVE-2023-47044 ZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure Vulnerability

Adobe Media Encoder version 24.0.2 and earlier and 23.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue...

CVE-2023-44329

Adobe Bridge (13.x up to 13.0.4 and 14.x up to 14.0.0) is affected by an Access of Uninitialized Pointer vulnerability that can disclose memory. Root cause: uninitialized memory access during MP4/file parsing. Impact: potential memory disclosure; mitigations bypassed (ASLR). Exploitation requires...

CVE-2023-44327 ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability

Adobe Bridge versions 13.0.4 and earlier and 14.0.0 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires...

CVE-2023-44333 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V.

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2023-44335

CVE-2023-44335 affects Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier). It is an out-of-bounds read vulnerability that can disclose sensitive memory; exploitation can bypass ASLR. An attacker must entice a victim to open a malicious file (user interaction). The CVSS 3.1 base ...

CVE-2023-44334 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI.

Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...