CVE-2026-21328CWE-787

CVE-2026-21328

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

⚡ A simple click is all it takes to set the stage for chaos! After Effects versions 25.6 and earlier harbor a sneaky out-of-bounds write vulnerability that can lead to arbitrary code execution when a user opens a malicious file. 🔥 Think of this vulnerability like a movie ticket that allows someone to sneak into the projection room and alter the film while it's playing. It might look harmless at first, but once that film rolls, the unexpected changes could wreak havoc on the entire show! An attacker could exploit this flaw to execute any code within the victim's user context. This means they could potentially manipulate files, steal data, or even take complete control of the system. The consequences could range from annoying glitches to a full-blown security nightmare!

Put simply

Think of this vulnerability like a movie ticket that allows someone to sneak into the projection room and alter the film while it's playing. It might look harmless at first, but once that film rolls, the unexpected changes could wreak havoc on the entire show! This out-of-bounds write vulnerability allows attackers to overwrite memory locations in After Effects, paving the way for arbitrary code execution when a user interacts with a malicious file. It requires the victim to open the crafted file, making user awareness crucial in preventing exploitation.

What to do

An attacker could exploit this flaw to execute any code within the victim's user context. This means they could potentially manipulate files, steal data, or even take complete control of the system. The consequences could range from annoying glitches to a full-blown security nightmare! Update After Effects to version 25.7 or later to eliminate this vulnerability. Additionally, educate users about the risks associated with opening unknown or suspicious files. Regularly monitor security patches to keep your applications safe! You've got this! Stay vigilant, patch up, and enjoy your creative projects with peace of mind! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-10T23:16Z
Affected products (1)
ProductVersionsFixed in
adobe/after_effects< 25.6.425.6.4
References (1)
EPSS history
Timeline
  • 10 FEB 17:53Z
    After Effects | Out-of-bounds Write (CWE-787)
    cvelistv5