CVE-2024-20797: 
NixOS vulnerability analysis and mitigation

Adobe Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability identified as CVE-2024-20797. The vulnerability was discovered and initially reported on April 11, 2024, affecting Adobe Animate installations on both macOS and Windows operating systems (NVD).

The vulnerability is classified as an out-of-bounds read (CWE-125) that occurs when parsing a crafted file. This can result in reading past the end of an allocated memory structure. The vulnerability has received a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code in the context of the current user. The impact spans across confidentiality, integrity, and availability, with all three aspects rated as High according to the CVSS scoring (Adobe Advisory).

Exploitation of this vulnerability requires user interaction, specifically the victim must open a malicious file. The attack complexity is considered Low, requiring no privileges, but does need local access to the system (NVD).

Adobe has released security updates to address this vulnerability. Users should upgrade to Adobe Animate version 23.0.5 or 24.0.2, depending on their current version stream (Adobe Advisory).