CVE-2025-21135 - Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Back Back to CVE browser

HIGH

Animate | Integer Underflow (Wrap or Wraparound) (CWE-191)

Published Jan 14, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.27%

Description

Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

Vendor Adobe Product Animate Default
affected
- Version
  0
  Status
  affected
  Constraints
  <=23.0.9

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Adobe

Animate

affected

Version	Status	Constraints
0	affected	<=23.0.9

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-191

References (1)

https://helpx.adobe.com/security/products/animate/apsb25-05.html
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://helpx.adobe.com/security/products/animate/apsb25-05.html		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Jan 14, 2025

Updated Jan 14, 2025

Reserved Dec 4, 2024

Link CVE-2025-21135

CISA Vulnrichment

Updated Jan 14, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-21135

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-21135