CVE-2021-21071: 
NixOS vulnerability analysis and mitigation

Adobe Animate version 21.0.3 and earlier versions are affected by a Memory Corruption vulnerability identified as CVE-2021-21071. The vulnerability was disclosed in March 2021 and affects Adobe Animate software installations (NVD Database).

The vulnerability is classified as an Out-of-bounds Write (CWE-787) memory corruption issue. According to the CVSS 3.0 scoring system, it has received a Base Score of 7.8 (HIGH) with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Under CVSS 2.0, it received a score of 6.8 (MEDIUM) with vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P) (NVD Database).

If successfully exploited, this vulnerability could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. The vulnerability affects the confidentiality, integrity, and availability of the system with high severity (NVD Database).

Exploitation of this vulnerability requires user interaction, specifically that a victim must open a malicious file. The attack complexity is considered low, requiring no privileges, but does need user interaction for successful exploitation (NVD Database).

Adobe has released patches to address this vulnerability. Users are advised to update to the latest version of Adobe Animate. The fix is available through Adobe's security bulletin (Adobe Security).