Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
History

Tue, 12 Nov 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 12 Nov 2024 16:30:00 +0000

Type Values Removed Values Added
Description Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Title Animate | Out-of-bounds Read (CWE-125)
Weaknesses CWE-125
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published: 2024-11-12T16:14:27.739Z

Updated: 2024-11-12T17:23:37.270Z

Reserved: 2024-10-15T15:35:47.030Z

Link: CVE-2024-49527

cve-icon Vulnrichment

Updated: 2024-11-12T17:23:30.505Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-12T17:15:09.240

Modified: 2024-11-13T17:01:58.603

Link: CVE-2024-49527

cve-icon Redhat

No data.