Lucene search
K

23 matches found

CVE
CVE
added 2020/02/20 8:35 p.m.109 views

CVE-2020-3764

CVE-2020-3764 affects Adobe Media Encoder versions 14.0 and earlier. The issue is an out-of-bounds write in the encoder, which could allow arbitrary code execution when exploiting the vulnerability. Publicly referenced materials in connected docs indicate the fix was delivered in the APSB20-10 ad...

7.8CVSS8AI score0.04932EPSS
CVE
CVE
added 2022/06/13 12:9 p.m.86 views

CVE-2021-46818

Adobe Media Encoder, versions 15.4 and earlier, are affected by a memory corruption vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious M4A file, i.e., user interaction is needed. A patch is available per...

7.8CVSS7.9AI score0.01864EPSS
CVE
CVE
added 2022/06/13 12:15 p.m.85 views

CVE-2021-46817

Affected software: Adobe Media Encoder (version 15.4 and earlier). Issue: memory corruption vulnerability in handling M4A files. Impact: unauthenticated attacker could achieve arbitrary code execution in the context of the current user. Prerequisites: user interaction is required (victim must ope...

7.8CVSS7.9AI score0.01869EPSS
CVE
CVE
added 2024/04/10 1:2 p.m.85 views

CVE-2024-20772

Summary : CVE-2024-20772 affects Adobe Media Encoder 24.2.1, 23.6.4 and earlier. It is a stack-based buffer overflow that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malicious file. Public references consi...

7.8CVSS7.8AI score0.00612EPSS
CVE
CVE
added 2022/06/15 6:40 p.m.79 views

CVE-2021-43756

CVE-2021-43756 affects Adobe Media Encoder versions 22.0 and 15.4.2 (and earlier). The issue is an Out-of-bounds Write memory corruption that could allow arbitrary code execution in the context of the current user, triggered when a user opens a malicious file. Exploitation requires user interacti...

9.3CVSS7.7AI score0.01959EPSS
CVE
CVE
added 2023/07/12 11:17 a.m.73 views

CVE-2021-43758

Adobe Media Encoder CVE-2021-43758 is an out-of-bounds read vulnerability affecting version 22.0 and 15.4.2 (and earlier). The issue can disclose sensitive memory and bypass ASLR, with exploitation requiring a user to open a malicious MP4 file. A patch is available via Adobe APSB21-118; updated v...

5.5CVSS4.3AI score0.00312EPSS
CVE
CVE
added 2023/09/06 1:8 p.m.66 views

CVE-2021-36060

Adobe Media Encoder 15.2 and earlier is affected by an out-of-bounds read in MPEG file parsing, enabling memory disclosure and potential bypass of ASLR. Exploitation requires user interaction (victim opens a crafted file). Affected version: 15.2 and earlier; remediation per APSB21-43 is to update...

5.5CVSS5.2AI score0.00319EPSS
CVE
CVE
added 2024/12/10 8:9 p.m.62 views

CVE-2024-49552

Adobe Media Encoder is affected by a Heap-based Buffer Overflow (CVE-2024-49552) in versions 25.0, 24.6.3 and earlier, allowing arbitrary code execution in the context of the current user if a user opens a crafted file. The root cause is a boundary error when processing untrusted input. Exploitat...

7.8CVSS7.4AI score0.00428EPSS
CVE
CVE
added 2024/09/13 7:0 a.m.59 views

CVE-2024-39377

CVE-2024-39377 affects Adobe Media Encoder versions 24.5, 23.6.8 and earlier, due to an out-of-bounds write that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected platforms include Windows/macO...

7.8CVSS7.8AI score0.00357EPSS
CVE
CVE
added 2024/09/13 7:0 a.m.59 views

CVE-2024-41870

CVE-2024-41870 affects Adobe Media Encoder. The vulnerability is an out-of-bounds read in the parser for crafted files, potentially causing disclosure of sensitive memory and enabling ASLR bypass. Exploitation requires user interaction (victim opens a malicious file). Affected versions include Me...

5.5CVSS5.3AI score0.00258EPSS
CVE
CVE
added 2023/07/12 11:17 a.m.58 views

CVE-2021-43757

Adobe Media Encoder is affected by CVE-2021-43757: out-of-bounds read in 22.0 and 15.4.2 (and earlier) that could disclose memory and bypass ASLR, with exploitation requiring user interaction via a malicious 3GP file. Remediation is to update to 22.1.1 or 15.4.3 (per APSB21-118).

7.8CVSS7.1AI score0.00329EPSS
CVE
CVE
added 2023/07/12 11:17 a.m.58 views

CVE-2021-43760

CVE-2021-43760 affects Adobe Media Encoder versions 22.0 and 15.4.2 (and earlier). It is an out-of-bounds read vulnerability that could disclose memory and bypass ASLR, with exploitation requiring a user to open a malicious MOV file. The connected advisories confirm fixes in APSB21-118, recommend...

5.5CVSS4.3AI score0.00312EPSS
CVE
CVE
added 2024/12/10 8:9 p.m.58 views

CVE-2024-49554

Adobe Media Encoder is affected by CVE-2024-49554: a NULL pointer dereference in versions 25.0, 24.6.3 and earlier can crash the application, causing a denial of service when a user opens a crafted file. Exploitation requires user interaction. The issue is acknowledged in APSB24-93; remediation i...

5.5CVSS6.5AI score0.00307EPSS
CVE
CVE
added 2025/04/08 5:35 p.m.57 views

CVE-2025-27194

CVE-2025-27194 affects Adobe Media Encoder prior to 24.6.5 / 25.2. The issue is an out-of-bounds write in Media Encoder that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. Affected versions incl...

7.8CVSS7.6AI score0.00296EPSS
CVE
CVE
added 2025/04/08 5:35 p.m.57 views

CVE-2025-27195

Adobe Media Encoder (versions 25.1, 24.6.4 and earlier) is affected by a Heap-based Buffer Overflow (CVE-2025-27195) that could allow arbitrary code execution in the context of the current user, requiring user interaction (victim must open a malicious file). The issue stems from a heap-based over...

7.8CVSS7.6AI score0.00353EPSS
CVE
CVE
added 2024/12/10 8:9 p.m.56 views

CVE-2024-49551

CVE-2024-49551 affects Adobe Media Encoder versions 25.0 and 24.6.3 and earlier, with an out-of-bounds write that could allow arbitrary code execution in the user’s context. Exploitation requires the victim to open a malicious file (user interaction). Connected sources also reference related CVEs...

7.8CVSS7.5AI score0.00349EPSS
CVE
CVE
added 2024/09/13 7:0 a.m.55 views

CVE-2024-41871

CVE-2024-41871 affects Adobe Media Encoder versions 24.5, 23.6.8 and earlier with an out-of-bounds read that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a crafted file). The issue is documented across multiple sources (NVD entry for CVE-20...

5.5CVSS5.9AI score0.00257EPSS
CVE
CVE
added 2024/12/10 8:9 p.m.55 views

CVE-2024-49553

CVE-2024-49553 affects Adobe Media Encoder 25.0, 24.6.3 and earlier with an out-of-bounds write that could execute code in the current user's context if a malicious file is opened. Connected sources confirm the issue and reference the APSB24-93 advisory; remediation is to update to the patched ve...

7.8CVSS7.4AI score0.00349EPSS
CVE
CVE
added 2024/09/13 7:0 a.m.49 views

CVE-2024-41872

CVE-2024-41872 affects Adobe Media Encoder (versions 24.5, 23.6.8 and earlier). It is an out-of-bounds read in parsing a crafted file that could disclose memory and bypass ASLR; exploitation requires user action (open a malicious file). APSB24-53 provides fixes (update to the patched builds). Con...

5.5CVSS5.3AI score0.00258EPSS
CVE
CVE
added 2024/09/13 7:0 a.m.48 views

CVE-2024-41873

Adobe Media Encoder is affected by an out-of-bounds read vulnerability (CVE-2024-41873) affecting versions 24.5, 23.6.8 and earlier. The issue could disclose sensitive memory and bypass mitigations like ASLR, requiring user interaction (victim opening a malicious file). The linked advisory APSB24...

5.5CVSS5.3AI score0.00258EPSS
CVE
CVE
added 2023/07/12 11:17 a.m.47 views

CVE-2021-43759

CVE-2021-43759 affects Adobe Media Encoder versions 22.0, 15.4.2 (and earlier). An out-of-bounds read could disclose memory and, by bypassing ASLR, enable information disclosure; exploitation requires the victim to open a malicious MP4 file. The issue is addressed in APSB21-118 with updates, and ...

5.5CVSS4.3AI score0.00312EPSS
CVE
CVE
added 2026/05/12 5:16 p.m.19 views

CVE-2026-34640

Media Encoder CVE-2026-34640 affects versions 26.0.2, 25.6.4 and earlier with an Integer Overflow or Wraparound (CWE-190). The issue could allow arbitrary code execution in the context of the current user and requires user interaction (victim must open a malicious file). These details confirm the...

7.8CVSS6.3AI score0.0017EPSS
CVE
CVE
added 2026/05/12 5:16 p.m.13 views

CVE-2026-34639

CVE-2026-34639 affects Adobe Media Encoder versions 26.0.2, 25.6.4 and earlier. It is an out-of-bounds write (CWE-787) vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The ava...

7.8CVSS6.3AI score0.00148EPSS