CVE-2021-28604: 
Adobe After Effects vulnerability analysis and mitigation

Adobe After Effects version 18.2 and earlier versions are affected by a Heap-based Buffer Overflow vulnerability (CVE-2021-28604). The vulnerability was disclosed and documented in Adobe's security bulletin, with a CVSS v3.1 base score of 7.8 (High) (NVD, Adobe Advisory).

The vulnerability is classified as a Heap-based Buffer Overflow (CWE-122) and Out-of-bounds Write (CWE-787) that occurs when parsing a specially crafted file. The CVSS v3.1 vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access, low attack complexity, no privileges required, and user interaction required for exploitation (NVD).

If successfully exploited, this vulnerability could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. The vulnerability affects the confidentiality, integrity, and availability of the system with high severity ratings for each aspect (NVD).

Users should update to a version newer than Adobe After Effects 18.2 to address this vulnerability. The issue has been addressed by Adobe through security updates detailed in their security bulletin (Adobe Advisory).