Access of Uninitialized Pointer Vulnerability in Adobe Animate
CVE-2025-43557

7.8HIGH

Key Information:

Vendor

Adobe

Status
Vendor
CVE Published:
13 May 2025

What is CVE-2025-43557?

Adobe Animate versions 24.0.8 and 23.0.11, along with earlier iterations, are susceptible to an Access of Uninitialized Pointer vulnerability. This flaw could enable arbitrary code execution within the user's environment, contingent on user interaction, as it necessitates that a victim opens a specifically crafted malicious file. It is crucial for users to remain vigilant and keep their software updated to mitigate potential security risks associated with this vulnerability.

Affected Version(s)

Animate 0 <= 23.0.11

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.