After Effects versions 25.2, 24.6.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
2025-07-08T17:15:36.510
2025-07-14T15:22:09.027
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | adobe | after_effects | < 24.6.7 | Yes |
| Application | adobe | after_effects | < 25.3 | Yes |
| Operating System | apple | macos | - | No |
| Operating System | microsoft | windows | - | No |