CVE-2020-9747CWE-415

Double-free vulnerability in Adobe Animate 20.5

High · published October 21, 2020

CVSS v3.1
7.8
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Adobe Animate version 20.5 (and earlier) is affected by a double free vulnerability when parsing a crafted .fla file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04147 · 90.8th percentile
Weakness
CWE-415 · Double Free
Published
2020-10-21T20:02Z
EPSS history
Timeline
  • 21 OCT 20:02Z
    Double-free vulnerability in Adobe Animate 20.5
    cvelistv5