PT-2026-7366

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are susceptible to an out-of-bounds read issue, potentially leading to memory exposure. An attacker could exploit this to disclose sensitive information stored i...

PT-2026-7368

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are susceptible to an Access of Memory Location After End of Buffer issue, potentially leading to application denial-of-service. An attacker could leverage this ...

PT-2026-7391

After Effects versions 25.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user...

PT-2026-7387

Substance3D - Designer versions 15.1.0 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to access sensitive information stored in memory. Exploitation of this issue requires user interaction in that a...

PT-2026-7376

After Effects versions 25.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

PT-2026-7384

Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7468

Name of the Vulnerable Software and Affected Versions Lightroom Desktop versions 15.1 and earlier Description Lightroom Desktop versions 15.1 and earlier contain an out-of-bounds write issue. Successful exploitation could lead to arbitrary code execution with the privileges of the current user...

PT-2026-7383

InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that...

PT-2026-7378

After Effects versions 25.6 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7430

DNG SDK versions 1.7.1 2410 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation of this issue requires user...

PT-2026-7379

After Effects versions 25.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-7372

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description After Effects versions 25.6 and earlier are subject to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a specially...

PT-2026-7370

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software contains an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a special...

PT-2026-7428

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier are susceptible to an out-of-bounds write issue. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of th...

PT-2026-7369

Name of the Vulnerable Software and Affected Versions Audition versions 25.3 and earlier Description Audition versions 25.3 and earlier are susceptible to an out-of-bounds read issue, potentially leading to memory exposure. Successful exploitation could allow an attacker to disclose sensitive...

PT-2026-7389

Substance3D - Designer versions 15.1.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that...

PT-2026-7386

Substance3D - Designer versions 15.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires...

PT-2026-7371

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software is susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to gain access to sensitive information stored in memory...

PT-2026-7429

Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2410 and earlier Description DNG SDK versions 1.7.1 2410 and earlier are susceptible to an Integer Overflow or Wraparound condition. Successful exploitation could lead to arbitrary code execution with the privileges of t...

fontforge: FontForge: Remote Code Execution via Use-After-Free in SFD file parsing

A flaw was found in FontForge. This use-after-free vulnerability, occurring during the parsing of SFD Spline Font Database files, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a...