ZDI-CAN-21706: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47067

Summary

Adobe After Effects versions 24.0.2 and earlier, as well as 23.6 and earlier, are susceptible to an out-of-bounds read vulnerability. This issue arises when processing specially crafted files, potentially allowing attackers to read beyond allocated memory structures. Successful exploitation necessitates user interaction, as victims must open a malicious file, possibly leading to arbitrary code execution within the context of the affected user's session.

References