CVE-2021-44193: 
Adobe After Effects vulnerability analysis and mitigation

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability identified as CVE-2021-44193. The vulnerability was disclosed in December 2021 and requires user interaction through opening a malicious file to be exploited (NVD).

The vulnerability is classified as an out-of-bounds read (CWE-125) issue that could lead to disclosure of sensitive memory. The vulnerability has been assigned a CVSS v3.1 base score of 3.3 (LOW) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, indicating local access, low attack complexity, no privileges required, and user interaction required (NVD).

If successfully exploited, this vulnerability could lead to the disclosure of sensitive memory information and potentially allow attackers to bypass security mitigations such as ASLR (Address Space Layout Randomization) (NVD).

Adobe has released patches to address this vulnerability. Users should update to versions later than After Effects 22.0 or 18.4.2 to mitigate this security issue (Adobe Advisory).