Adobe Media Encoder

Media Encoder <=25.1 Heap Buffer Overflow (CVE-2025-27195)
CVE-2025-27195 7.8 - High - April 08, 2025

Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Media Encoder OOB Write CVE-2025-27194: Exec Exploit (before 25.2)
CVE-2025-27194 7.8 - High - April 08, 2025

Media Encoder versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Media Encoder NULL Pointer Dereference Denial-of-Service Vulnerability
CVE-2024-49554 5.5 - Medium - December 10, 2024

Media Encoder versions 25.0, 24.6.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

NULL Pointer Dereference

Adobe Media Encoder Out-of-Bounds Write Vulnerability
CVE-2024-49553 7.8 - High - December 10, 2024

Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Media Encoder Out-of-Bounds Write Vulnerability
CVE-2024-49551 7.8 - High - December 10, 2024

Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Media Encoder Heap-based Buffer Overflow Vulnerability
CVE-2024-49552 7.8 - High - December 10, 2024

Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Media Encoder <24.5 OOB Write CVE-2024-39377
CVE-2024-39377 7.8 - High - September 13, 2024

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

OOB read in Microsoft Media Encoder 24.5 may expose memory
CVE-2024-41871 7.8 - High - September 13, 2024

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

OOB read in Media Encoder <24.5 (ASLR bypass)
CVE-2024-41870 5.5 - Medium - September 13, 2024

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Media Encoder 24.5 OOB Read Enables Sensitive Data Disclosure
CVE-2024-41872 5.5 - Medium - September 13, 2024

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Out-of-Bounds Read in Media Encoder 24.5/23.6.8 (before 24.5)
CVE-2024-41873 5.5 - Medium - September 13, 2024

Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Media Encoder <24.3 OOB Read Disclosure (ASLR Bypass)
CVE-2024-30278 5.5 - Medium - June 13, 2024

Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Media Encoder <=24.2.1 Stack-Buffer Overflow (CVE-2024-20772)
CVE-2024-20772 7.8 - High - April 10, 2024

Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Media Encoder 24.0.2/23.6: Uninitialized Pointer Disclosure
CVE-2023-47044 5.5 - Medium - November 16, 2023

Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Access of Uninitialized Pointer

Adobe Media Encoder 24.0.2 OOB Read in File Parser Enables RCE
CVE-2023-47043 7.8 - High - November 16, 2023

Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

OOB Write CVE-2023-47041 in Adobe Media Encoder v23.6 & earlier
CVE-2023-47041 - November 16, 2023

Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Media Encoder <24.0.2/23.6: OOB Read in MIME Parse
CVE-2023-47040 - November 16, 2023

Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-Bounds Read in Adobe Media Encoder 15.2 Causing Memory Disclosure
CVE-2021-36060 5.5 - Medium - September 06, 2023

Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Media Encoder <22.0/15.4.2: OOBR Disclosure via 3GP
CVE-2021-43757 7.8 - High - July 12, 2023

Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious 3GP ?file

Out-of-bounds Read

Adobe Media Encoder 22.0 OOB Read Disclosure via Malicious MP4
CVE-2021-43758 5.5 - Medium - July 12, 2023

Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MP4 file.

Out-of-bounds Read

Adobe Media Encoder 22.0/15.4.2 OOB Read in MOV Parsing
CVE-2021-43760 5.5 - Medium - July 12, 2023

Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MOV file.

Out-of-bounds Read

Adobe Med Encoder OOB Read in MP4 before 22.0/15.4.2
CVE-2021-43759 5.5 - Medium - July 12, 2023

Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MP4 file.

Out-of-bounds Read

Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file
CVE-2021-36013 7.8 - High - August 23, 2021

Adobe Media Encoder version 15.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability
CVE-2020-9745 6.1 - Medium - September 18, 2020

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Out-of-bounds Read

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability
CVE-2020-9744 6.1 - Medium - September 18, 2020

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Out-of-bounds Read

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability
CVE-2020-9739 6.1 - Medium - September 18, 2020

Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Out-of-bounds Read

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability
CVE-2020-9646 - July 17, 2020

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability
CVE-2020-9649 - July 17, 2020

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability
CVE-2020-9650 - July 17, 2020

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability
CVE-2019-8241 4.3 - Medium - November 14, 2019

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Out-of-bounds Read

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability
CVE-2019-8242 4.3 - Medium - November 14, 2019

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Out-of-bounds Read

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability
CVE-2019-8243 4.3 - Medium - November 14, 2019

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Out-of-bounds Read

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability
CVE-2019-8244 4.3 - Medium - November 14, 2019

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Out-of-bounds Read

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability
CVE-2019-8246 9.8 - Critical - November 14, 2019

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Memory Corruption

Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability
CVE-2019-7842 - May 22, 2019

Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Successful exploitation could lead to remote code execution.

Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability
CVE-2019-7844 - May 22, 2019

Adobe Media Encoder version 13.0.2 has an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.