CVE-2021-40760

Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

Score
CVSS 3.1 7.8 High
Status
Modified - psirt@adobe.com
Published
2021-11-18
Last modified
2025-04-23
Weaknesses
CWE-119, CWE-788

Affected products

References

 
 
© AVABIS GmbH privacypolicy about