CVE-2023-47068 ZDI-CAN-21702: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

CVE-2023-47068

Concrete details confirm CVE-2023-47068 affects Adobe After Effects up to versions 24.0.2 and 23.6 and earlier, with an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user context. Exploitation requires user interaction (victim opens a malicious file). ...

Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66)

The version of Adobe After Effects installed on the remote Windows host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-66 advisory. - Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bound...

Adobe After Effects < 23.6.2 / 24.0.0 < 24.0.3 Multiple Vulnerabilities (APSB23-66) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 23.6.2, 24.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-66 advisory. - Adobe After Effects version 24.0.2 and earlier and 23.6 and earlier are affected by an out-of-bounds...