CVE-2025-27204: 
Adobe After Effects vulnerability analysis and mitigation

Adobe After Effects versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds read vulnerability identified as CVE-2025-27204. The vulnerability was disclosed on April 8, 2025, and affects both Windows and macOS operating systems running Adobe After Effects (NVD CVE).

The vulnerability is classified as an out-of-bounds read (CWE-125) that could potentially expose sensitive memory information. The vulnerability has received a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. This indicates that the vulnerability requires local access and user interaction, but no privileges, and can result in high confidentiality impact (NVD CVE).

The vulnerability could lead to the disclosure of sensitive memory information. Additionally, attackers could potentially leverage this vulnerability to bypass security mitigations such as Address Space Layout Randomization (ASLR) (NVD CVE).

Adobe has addressed this vulnerability in After Effects version 24.6.5 and version 25.2. Users are advised to update to these versions or later to mitigate the vulnerability (NVD CVE).