Adobe After Effects Out-of-Bounds Read Vulnerability Allowing Memory Disclosure and Mitigation Bypass

A vulnerability allowing out-of-bounds read has been identified in Adobe After Effects versions 25.1 and 24.6.4 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker might exploit this issue to bypass security mitigations such as Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, potentially leading to sensitive information disclosure and bypassing of ASLR, a security feature that helps prevent memory corruption vulnerabilities.