5.5

CVE-2025-54239

Medienbericht

After Effects | Out-of-bounds Read (CWE-125)

After Effects versions 25.3, 24.6.7 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure, potentially disclosing sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ After Effects Version < 24.6.8
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
Adobe ≫ After Effects Version >= 25.0 < 25.4
   Apple ≫ macOS Version -
   Microsoft ≫ Windows Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.122
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
10.09.2025 09:36
https://helpx.adobe.com/security/products/after_effects/apsb25-86.html
Vendor Advisory