Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
History

Fri, 18 Oct 2024 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe lightroom
CPEs cpe:2.3:a:adobe:lightroom:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:lightroom:*:*:*:*:classic:*:*:*
Vendors & Products Adobe
Adobe lightroom

Wed, 09 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 09 Oct 2024 09:45:00 +0000

Type Values Removed Values Added
Description Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Lightroom Desktop | Out-of-bounds Read (CWE-125)
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-10-09T09:42:08.760Z

Updated: 2024-10-09T13:19:21.497Z

Reserved: 2024-08-21T23:00:59.351Z

Link: CVE-2024-45145

cve-icon Vulnrichment

Updated: 2024-10-09T13:19:15.400Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-09T10:15:03.283

Modified: 2024-10-18T14:26:54.053

Link: CVE-2024-45145

cve-icon Redhat

No data.