ZDI-CAN-21698: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47040

Summary

Adobe Media Encoder versions 24.0.2 and earlier, as well as 23.6 and earlier, are vulnerable to an out-of-bounds read issue when processing specially crafted files. This could potentially allow an attacker to read past the end of an allocated memory structure. Exploitation requires user interaction, as it necessitates that the user open a malicious file, potentially leading to code execution in the context of the current user session.

References