Out-of-Bounds Read Vulnerability in Adobe Animate Products
CVE-2025-27201

5.5MEDIUM

Key Information:

Vendor
Adobe
Status
Animate
Vendor
CVE Published:
8 April 2025

Summary

Adobe Animate versions 24.0.7, 23.0.10, and earlier are susceptible to an out-of-bounds read vulnerability, potentially allowing attackers to access sensitive memory. This issue could enable malicious users to circumvent security mitigations like Address Space Layout Randomization (ASLR). Exploiting this vulnerability necessitates user interaction, as a user must open a specially crafted file for the attack to succeed.

Affected Version(s)

Animate 0 <= 23.0.10

References

https://helpx.adobe.com/security/products/animate/apsb25-...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.