Integer Underflow Vulnerability in Adobe Animate Software
CVE-2025-21135

7.8HIGH

Key Information:

Vendor

Adobe
Status
Animate
Vendor
CVE Published:
14 January 2025

What is CVE-2025-21135?

Adobe Animate versions 24.0.6, 23.0.9, and earlier are impacted by an Integer Underflow vulnerability that can potentially allow an attacker to execute arbitrary code within the context of the affected user. Successful exploitation of this vulnerability necessitates user interaction, whereby a user must open a crafted file specifically designed to trigger the effect. This raises significant concerns regarding file handling and user awareness.

References

https://helpx.adobe.com/security/products/animate/apsb25-...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.