Out-of-Bounds Read Vulnerability in Adobe After Effects

CVE-2026-21322

What is CVE-2026-21322?

Adobe After Effects, specifically version 25.6 and earlier, exhibits a vulnerability that allows for out-of-bounds read errors during the parsing of specially crafted files. This flaw can lead to unauthorized code execution within the context of the affected user session. For exploitation to occur, a victim must unintentionally open a malicious file crafted by an attacker, thus initiating the attack. This vector emphasizes the necessity for users to exercise caution when handling unsolicited files.

References