ZDI-CAN-21702: Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2023-47068

Summary

Adobe After Effects versions 24.0.2 and 23.6, along with earlier iterations, are susceptible to an out-of-bounds read vulnerability during the processing of specially crafted files. This could allow an attacker to read memory beyond allocated structures, potentially leading to the execution of arbitrary code within the context of the current user. Exploitation requires user interaction, as it necessitates that the victim opens a maliciously crafted file.

References