CVE-2024-47449: 
Adobe Audition vulnerability analysis and mitigation

CVE-2024-47449 is an out-of-bounds read vulnerability affecting Adobe Audition versions 23.6.9, 24.4.6 and earlier. The vulnerability was disclosed on November 12, 2024, and affects both Windows and macOS operating systems (NVD).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) with a CVSS v3.1 base score of 5.5 (Medium). The attack vector is local (AV:L) with low attack complexity (AC:L), requires no privileges (PR:N), and needs user interaction (UI:R). The scope is unchanged (S:U) with high confidentiality impact (C:H) but no impact on integrity (I:N) or availability (A:N) (NVD).

The vulnerability could lead to disclosure of sensitive memory and potentially allow an attacker to bypass security mitigations such as Address Space Layout Randomization (ASLR). However, successful exploitation requires user interaction, specifically opening a malicious file (NVD).

Adobe has released security updates to address this vulnerability. Users should update their Adobe Audition installations to versions newer than 23.6.9 and 24.4.6 respectively (Adobe Advisory).