Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-82672)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee (Adobe), which is mainly used for 2D and 3D compositing, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions 18.4.2 and earlier and versions 22.0 through 22.1.1 and earlier, which stems from the product’s failure to validate memory boundaries and can be exploited by an attacker to cause a privilege escalation.