CVE-2021-40754
published 2021-11-18CVE-2021-40754: Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially…
high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | after_effects | <= 18.4.1 | — |
| adobe | after_effects | unspecified – 18.4.1 | — |