CVE-2021-40758: 
Adobe After Effects vulnerability analysis and mitigation

Adobe After Effects version 21.9 (and earlier) was affected by a memory corruption vulnerability (CVE-2021-40758) due to insecure handling of malicious WAV files. The vulnerability was disclosed and patched in October 2021 as part of a larger Adobe security update (NVD, Adobe Security).

The vulnerability is classified as an 'Access of Memory Location After End of Buffer' issue (CWE-788, CWE-119) that could lead to arbitrary code execution. It received a CVSS score of 7.8, indicating high severity (Threatpost, NVD CNA).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current process through improper validation of user-supplied data (Threatpost).

Adobe addressed this vulnerability in the October 2021 security update. Users are advised to update to the latest version of After Effects to mitigate this security risk (Adobe Security).

The vulnerability was discovered and reported by CQY of Topsec Alpha Team. It was part of a larger security update from Adobe that addressed 92 vulnerabilities across 14 products, with 66 rated as critical (Threatpost).