ZDI-CAN-21699: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47043

Summary

Adobe Media Encoder is susceptible to an out-of-bounds read vulnerability when processing specially crafted files. This flaw can result in a read operation extending past the boundaries of an allocated memory structure, potentially allowing an attacker to execute arbitrary code within the context of the affected user. Successful exploitation hinges on user interaction, as the victim must open a specifically crafted file designed to trigger the vulnerability.

References