PT-2024-8014 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 23.6.9, 24.6.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass...

PT-2024-8017 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 24.6.2 and earlier After Effects version 23.6.9 Description: The issue is related to an out-of-bounds write vulnerability in Adobe After Effects, which could allow an attacker to execute arbitrary code in the context of...

CVE-2024-47446: Out-of-bounds Read

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

PT-2024-8016 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 23.6.9, 24.6.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

CVE-2024-47443: Out-of-bounds Write

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

CVE-2024-47444: Out-of-bounds Read

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

PT-2024-8013

Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 23.6.9, 24.6.2 and earlier Description: The issue is related to an out-of-bounds read operation in memory, which could allow an attacker to gain unauthorized access to protected information using a specially craft...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

Adobe After Effects < 24.6.3 Multiple Vulnerabilities (APSB24-85) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 24.6.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-85 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2024-47441, CVE-2024-47442,...

PT-2024-8012

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 23.6.9, 24.6.2 and earlier Description The issue is related to an out-of-bounds read operation in memory, which could allow an attacker to gain unauthorized access to protected information using a specially crafted...

APSB24-85 : Security update available for Adobe After Effects

Adobe has released an update for Adobe After Effects for Windows and macOS. This update addresses critical and important security vulnerabilities. Successful exploitation could lead to arbitrary code execution and memory leak in the context of the current user...

CVE-2024-47441: Out-of-bounds Write

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-47442: Out-of-bounds Write

After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe After Effects < 24.6.3 Multiple Vulnerabilities (APSB24-85)

The version of Adobe After Effects installed on the remote Windows host is prior to 24.6.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-85 advisory. - Out-of-bounds Write CWE-787 potentially leading to Arbitrary code execution CVE-2024-47441, CVE-2024-47442,...

Important: qt5-qtgraphicaleffects

Issue Overview: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not ye...

In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.

Impact What kind of vulnerability is it? Who is impacted? In certain very specific situations, it was possible for the policies of an update action to be skipped. This occurred only on "empty" update actions no changing fields, and would allow their hooks side effects to be performed when they...

GHSA-HF59-7RWQ-785M In AshPostgres, empty, atomic, non-bulk actions, policy bypass for side-effects vulnerability.

Impact What kind of vulnerability is it? Who is impacted? In certain very specific situations, it was possible for the policies of an update action to be skipped. This occurred only on "empty" update actions no changing fields, and would allow their hooks side effects to be performed when they...

CVE-2024-49756

AshPostgres is the PostgreSQL data layer for Ash Framework. Starting in version 2.0.0 and prior to version 2.4.10, in certain very specific situations, it was possible for the policies of an update action to be skipped. This occurred only on "empty" update actions no changing fields, and would...