Media Encoder | Out-of-bounds Write (CWE-787)

CVE-2024-49553

Summary

Adobe Media Encoder versions 25.0, 24.6.3, and earlier are susceptible to an out-of-bounds write vulnerability. This flaw could lead to arbitrary code execution, allowing an attacker to execute malicious code within the context of the affected user. Exploitation necessitates user interaction, as it requires the target to open a specially crafted file. Users are encouraged to avoid opening files from untrusted sources and to update their software to the latest versions to mitigate the risk associated with this vulnerability.

References