PT-2026-40419 · Adobe · After Effects

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-34690

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6.4 and earlier After Effects version 26.0

Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. This issue could result in arbitrary code execution in the context of the current user and requires user interaction, specifically the opening of a malicious file.

Recommendations Update After Effects versions 25.6.4 and earlier to a patched version. Update After Effects version 26.0 to a patched version.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2026-06654

CVE-2026-34690

Affected Products

After Effects

References · 4

• https://helpx.adobe.com/security/products/after_effects/apsb26-48.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06654 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34690 · Security Note
• https://twitter.com/CVEnew/status/2054324081538060300 · Twitter Post