Vulnerability · Published Mar 12, 2021 · Assigned by adobe

CVE-2021-21073Adobe Animate out-of-bounds read vulnerability

High 7.1

In plain English

A high-severity out-of-bounds read in Animate from Adobe. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities).

Severity (CVSS 3.0)7.1High

Exploit odds (30 days)3.3%top 11.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products (as reported)

Vendor	Product	Versions
Adobe	Animate	unspecified – through 21.0.3unspecified – through None

Weakness: CWE-125 · Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

References

https://helpx.adobe.com/security/products/animate/apsb21-21.html x_refsource_MISC