PT-2025-1179 · Adobe · Animate
Published
2025-01-14
·
Updated
2025-10-31
·
CVE-2025-21135
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Adobe Animate versions 24.0.6, 23.0.9 and earlier
Description
The issue is related to an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, as the victim must open a malicious file. This vulnerability is associated with a loss of integer significance and can be exploited by an attacker using a specially crafted malicious file, allowing them to execute arbitrary code in the context of the current user.
Recommendations
For Adobe Animate versions 24.0.6, 23.0.9 and earlier, consider avoiding the use of potentially malicious files until a patch is available. As a temporary workaround, be cautious when opening files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Animate