PT-2026-7373 · Adobe · After Effects

Jann Horn · Published 2026-02-10 · Updated 2026-02-11 · CVE-2026-21321

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier

Description The software is susceptible to an Integer Overflow or Wraparound issue that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a specially crafted file.

Recommendations Update After Effects to a version later than 25.6.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

BDU:2026-01915

CVE-2026-21321

Affected Products

After Effects

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-21321 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21321 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01915 · Security Note
• https://helpx.adobe.com/security/products/after_effects/apsb26-15.html · Vendor Advisory
• https://t.me/cveNotify/151730 · Telegram Post