Adobe Animate Out-of-Bounds Read Vulnerability Allowing Memory Disclosure and ASLR Bypass

A vulnerability allowing out-of-bounds read has been identified in Adobe Animate versions through 24.0.7 and 23.0.10 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker might exploit this issue to bypass Address Space Layout Randomization (ASLR) mitigations. Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, potentially allowing an attacker to read sensitive information or manipulate program behavior. Additionally, the vulnerability could be used to bypass ASLR, a security feature that helps prevent memory corruption vulnerabilities from being exploited.