CVE-2020-9749Out-of-bounds Read in Adobe Animate

CWE-125Out-of-bounds Read3 documents3 sources
Severity
7.8HIGHNVD
EPSS
4.0%
top 11.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 21
Latest updateMay 24

Description

Adobe Animate version 20.5 (and earlier) is affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted .fla file in Animate.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

CVEListV5adobe/animateunspecified20.5+1
NVDadobe/animate20.5

🔴Vulnerability Details

2
GHSA
GHSA-7648-ghjh-9mr3: Adobe Animate version 202022-05-24
CVEList
Out-of-bounds read vulnerability in Adobe Animate 20.52020-10-21
CVE-2020-9749 — Out-of-bounds Read in Adobe Animate | cvebase