CVE-2023-47042

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 24.0.2 and earlier Adobe Media Encoder versions 23.6 and earlier

Description The issue is related to a Heap-based Buffer Overflow vulnerability in the Adobe Media Encoder application, which can be exploited to execute arbitrary code in the context of the current user. This requires user interaction, where a victim must open a malicious file. The vulnerability is associated with reading beyond the boundaries of a buffer in memory.

Recommendations For Adobe Media Encoder versions 24.0.2 and earlier, update to a version later than 24.0.2 to resolve the issue. For Adobe Media Encoder versions 23.6 and earlier, update to a version later than 23.6 to resolve the issue. As a temporary workaround, consider avoiding the use of MP4 file parsing functionality in Adobe Media Encoder until a patch is available.