ZDI-CAN-21708: Adobe After Effects MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2023-47070

Summary

Adobe After Effects versions 24.0.2 and 23.6, along with earlier variants, contain an out-of-bounds write vulnerability that may allow an attacker to execute arbitrary code. The successful exploitation of this fault necessitates user action, specifically the opening of a malicious file. This creates significant risk for users, enabling potential unauthorized actions within their computing environment.

References