CVE-2021-28617: 
NixOS vulnerability analysis and mitigation

Adobe Animate version 21.0.6 and earlier versions are affected by an Out-of-bounds Read vulnerability (CVE-2021-28617). The vulnerability was disclosed and patched in Adobe's security bulletin APSB21-50. This security flaw affects Adobe Animate installations on Windows systems (Adobe Security Bulletin).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) that occurs when parsing specially crafted files. The vulnerability has received a CVSS 3.0 Base Score of 5.5 (Medium) with the vector string CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N, and a CVSS 2.0 Base Score of 4.3 (Medium) with the vector string (AV:N/AC:M/Au:N/C:P/I:N/A:N) (NVD Database).

When successfully exploited, this vulnerability could lead to the disclosure of sensitive memory information in the context of the current user. The impact is primarily focused on confidentiality, with no direct impact on system integrity or availability (NVD Database).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest version of Adobe Animate as detailed in the security bulletin APSB21-50 (Adobe Security Bulletin).