CVE-2021-40755
published 2021-11-18CVE-2021-40755: Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SGI file in the…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SGI file in the DoReadContinue function, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | after_effects | <= 18.4.1 | — |
| adobe | after_effects | unspecified – 18.4.1 | — |