Out-of-Bounds Read Vulnerability in Adobe After Effects
CVE-2025-27184

5.5MEDIUM

Key Information:

Vendor
Adobe
Status
After Effects
Vendor
CVE Published:
8 April 2025

Summary

Adobe After Effects is susceptible to an out-of-bounds read vulnerability that can expose sensitive memory data. This security issue allows an attacker to potentially bypass mitigation techniques like Address Space Layout Randomization (ASLR). Successful exploitation requires user interaction, specifically, the victim must open a specially crafted malicious file designed to trigger the vulnerability.

Affected Version(s)

After Effects 0 <= 24.6.4

References

https://helpx.adobe.com/security/products/after_effects/a...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.