NULL Pointer Dereference Vulnerability in Adobe Media Encoder
CVE-2026-113539

5.5MEDIUM

Key Information:

Vendor

Adobe
Status
Media Encoder
Vendor
CVE Published:
10 November 2026

What is CVE-2026-113539?

Adobe Media Encoder is impacted by a NULL Pointer Dereference vulnerability that may lead to application crashes and subsequent denial-of-service conditions. This issue could be exploited by malicious actors if a user unwittingly opens a specially crafted file, resulting in the application becoming unresponsive. Ensuring that users are aware of potential risks when handling unknown files is crucial in mitigating the impact of this vulnerability.

Affected Version(s)

Media Encoder 0 <= 26.5.2

Media Encoder 0 <= 25.6.6

Media Encoder 26.5.3

References

https://www.adobe.com/trust/security/products/media-encod...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.