CVE-2024-47446

Name of the Vulnerable Software and Affected Versions Adobe After Effects versions 23.6.9, 24.6.2 and earlier

Description The issue is related to an out-of-bounds read operation in memory, which could allow an attacker to gain unauthorized access to protected information using a specially crafted file. This vulnerability may lead to the disclosure of sensitive memory and could be leveraged to bypass security mitigations. Exploitation requires user interaction, where a victim must open a malicious file.

Recommendations For Adobe After Effects versions 23.6.9, 24.6.2 and earlier, avoid opening files from untrusted sources until a patch is available. As a temporary workaround, consider restricting access to files that could potentially exploit this issue until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.