Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
References
History
Fri, 18 Oct 2024 14:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Adobe
Adobe lightroom |
|
CPEs | cpe:2.3:a:adobe:lightroom:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:lightroom:*:*:*:*:classic:*:*:* |
|
Vendors & Products |
Adobe
Adobe lightroom |
Wed, 09 Oct 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 09 Oct 2024 09:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
Title | Lightroom Desktop | Out-of-bounds Read (CWE-125) | |
Weaknesses | CWE-125 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published: 2024-10-09T09:42:08.760Z
Updated: 2024-10-09T13:19:21.497Z
Reserved: 2024-08-21T23:00:59.351Z
Link: CVE-2024-45145
Vulnrichment
Updated: 2024-10-09T13:19:15.400Z
NVD
Status : Analyzed
Published: 2024-10-09T10:15:03.283
Modified: 2024-10-18T14:26:54.053
Link: CVE-2024-45145
Redhat
No data.