CVE-2021-40751 — Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution

CVE-2021-40751

Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution PUBLISHED

Description (CNA)

Adobe After Effects version 18.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

Affected (CNA)

Vendor / product	Versions
Adobe / After Effects	affected unspecified through 18.4.1; affected unspecified through None

CWE

CWE-788

References

https://helpx.adobe.com/security/products/after_effects/apsb21-79.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/after_effects/apsb21-79.html

CISA-ADP

No English description supplied.

No references supplied.