Analysis Summary

CVE-2024-41868 CVSS:5.5

Adobe Audition could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read error. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

CVE-2024-41870 CVSS:5.5

Adobe Media Encoder could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read. By persuading a victim to open a specially crafted document, a remote attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-41868
• CVE-2024-41870

Affected Vendors

Affected Products

• Adobe Audition - 24.4.1
• Adobe Audition - 23.6.6
• Adobe Media Encoder 24.5
• Adobe Media Encoder 23.6.8
• Adobe Audition - 0

Remediation

Refer to Adobe Security Advisory for patch, upgrade or suggested workaround information.

CVE-2024-41868

CVE-2024-41870