Arbitrary Code Execution Vulnerability in Media Encoder

CVE-2024-39377

Summary

Adobe Media Encoder versions 24.5, 23.6.8, and earlier contain an out-of-bounds write vulnerability that may enable arbitrary code execution within the context of the current user. Successful exploitation of this flaw necessitates user interaction; specifically, a victim must open a malicious file crafted to trigger the vulnerability. This poses significant security risks, particularly in environments where users handle untrusted media files. Immediate action is advisable to safeguard systems and data from potential exploitation.

References