CVE-2024-49537 — Vulnetix

CVE-2024-49537 PUBLISHED

Es besteht eine Schwachstelle in Adobe Creative Cloud After Effects aufgrund eines stapelbasierten Pufferüberlaufs. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um vertrauliche Informationen offenzulegen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.

EPSS 0.13% · 31.6th percentile

Risk Scores

EPSS Score

0.13%

31.6th percentile

Affected Products

Vendor	Product	Versions
Adobe	Adobe Creative Cloud After Effects <25.1
Adobe	Adobe Creative Cloud After Effects <24.6.3

Timeline

Dec 10, 2024 CVE Published
Dec 11, 2024 EPSS Score
Dec 28, 2024 EPSS Score
Jan 13, 2025 EPSS Score
Jan 30, 2025 EPSS Score
Feb 16, 2025 EPSS Score
Mar 5, 2025 EPSS Score
Mar 21, 2025 EPSS Score
Apr 7, 2025 EPSS Score
Apr 7, 2025 Coalition ESS Score
Apr 24, 2025 EPSS Score
May 11, 2025 EPSS Score

References

https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3677.json advisory
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3677 advisory
https://helpx.adobe.com/security/products/media-encoder/apsb24-93.html advisory
https://helpx.adobe.com/security/products/illustrator/apsb24-94.html advisory
https://helpx.adobe.com/security/products/after_effects/apsb24-95.html advisory
https://helpx.adobe.com/security/products/animate/apsb24-96.html advisory
https://helpx.adobe.com/security/products/indesign/apsb24-97.html advisory
https://helpx.adobe.com/security/products/pdfl-sdk1/apsb24-98.html advisory
https://helpx.adobe.com/security/products/connect/apsb24-99.html advisory
https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-100.html advisory
https://helpx.adobe.com/security/products/substance3d-modeler/apsb24-102.html advisory
https://helpx.adobe.com/security/products/bridge/apsb24-103.html advisory
https://helpx.adobe.com/security/products/premiere_pro/apsb24-104.html advisory
https://helpx.adobe.com/security/products/substance3d_painter/apsb24-105.html advisory

Open in Interactive Console →