CVE-2021-40768: 
Adobe Character Animator vulnerability analysis and mitigation

Adobe Character Animator version 4.4 and earlier versions are affected by a Null pointer dereference vulnerability. The vulnerability was disclosed and addressed in October 2021 as part of Adobe's security bulletin APSB21-95 (Adobe Security, FortiGuard Labs).

The vulnerability is identified as a Null pointer dereference issue that occurs when parsing specially crafted files in Adobe Character Animator. The vulnerability has been assigned a CVSS base score indicating moderate severity (NVD Detail).

When exploited, this vulnerability could lead to application denial-of-service conditions. The exploitation requires user interaction, specifically requiring a victim to open a malicious file (FortiGuard Labs).

The vulnerability requires user interaction for successful exploitation, as an attacker would need to convince a target to open a malicious file. This requirement somewhat reduces the ease of exploitation (FortiGuard Labs).

Adobe has addressed this vulnerability in their security update APSB21-95. Users are advised to update to the latest version of Adobe Character Animator to mitigate this security issue (Adobe Security).