CVE-2024-39382

CVE-2024-39382 affects Adobe After Effects versions 23.6.6, 24.5 and earlier. The issue is an out-of-bounds read that can disclose sensitive memory and could enable bypassing mitigations such as ASLR. Exploitation requires user interaction (the victim must open a malicious file). The vulnerabilit...

CVE-2024-39382 After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41868

Audition versions 24.4.1, 23.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vict...

CVE-2024-45107

Summary of CVE-2024-45107 (Adobe Acrobat Reader): Affects Acrobat Reader DC/Windows/macOS versions including 20.005.30636, 24.002.20964/20991, 24.001.30123, and related builds. Root cause is a Use-After-Free in a Doc Object handling flow that can lead to disclosure of memory and potentially bypas...

Adobe Substance 3D Sampler < 4.5.1 Multiple Vulnerabilities (apsb24-65)

The version of Adobe Substance 3D Sampler installed on the remote host is prior to 4.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-65 advisory. - Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could...

CVE-2024-41854

InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-41835

Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this...

CVE-2024-34125

Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...

CVE-2024-41832

CVE-2024-41832 affects Adobe Acrobat Reader (versions including 20.005.30636, 24.002.20965/20964, 24.001.30123 and earlier). It is a font gvar TupleVariation data out-of-bounds read vulnerability that could disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim ...

CVE-2024-41835

CVE-2024-41835 affects Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier. The issue is an out-of-bounds read vulnerability that could disclose memory contents and help bypass mitigations such as ASLR. Exploitation requires user interaction (victim must ope...

CVE-2024-34127

Adobe InDesign Desktop: CVE-2024-34127 is an out-of-bounds read vulnerability in TIF file parsing affecting ID19.4, ID18.5.2 and earlier. Root cause is an out-of-bounds read that could disclose memory and bypass ASLR; exploitation requires user interaction (open a malicious file). Impact is memor...

CVE-2024-39387

Adobe Bridge (versions 13.0.8, 14.1.1 and earlier) is affected by an out-of-bounds read vulnerability (CVE-2024-39387) that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include macOS and Windo...

CVE-2024-34134

Adobe Illustrator is affected by an out-of-bounds read vulnerability (CVE-2024-34134) in versions 28.5, 27.9.4 and earlier, enabling memory disclosure and bypass of ASLR. Exploitation requires the user to open a malicious file. Multiple connected sources (NVD/CVE records, APSB24-45 references, an...

CVE-2024-41862

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41863

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

CVE-2024-41862

Adobe Substance 3D Sampler is affected: versions 4.5 and earlier contain an out-of-bounds read that can disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). In the connected material, remediation is referenced via APSB24-65, noting updates to ad...

CVE-2024-39396

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-39396

CVE-2024-39396 affects Adobe InDesign Desktop for ID18.5.2, ID19.3 and earlier, due to an out-of-bounds read in the PCX parsing path that can disclose memory. Exploitation requires user interaction (victim opens a malicious file). Mitigation details across connected sources indicate a patch path ...

CVE-2024-34140

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

Adobe Framemaker Buffer Overflow Vulnerability (CNVD-2024-24297)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker versions 2020.5 and 2022.3, which stems from being...