CVE-2024-52988: 
NixOS vulnerability analysis and mitigation

Adobe Animate versions 23.0.8, 24.0.5 and earlier are affected by an out-of-bounds write vulnerability (CVE-2024-52988) that was disclosed on December 10, 2024. This critical security flaw affects both Windows and macOS operating systems running the specified versions of Adobe Animate (NVD).

The vulnerability is classified as an out-of-bounds write (CWE-787) with a CVSS v3.1 base score of 7.8 (High). The vulnerability has the following vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability (Adobe Advisory).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The impact is considered critical as it could allow an attacker to execute malicious code with the same privileges as the logged-in user (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to Adobe Animate versions 23.0.9 or 24.0.6, depending on their current version (NVD).