CVE-2021-40759
published 2021-11-18CVE-2021-40759: Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | after_effects | <= 18.4.1 | — |
| adobe | after_effects | unspecified – 18.4.1 | — |