CVE-2025-54269
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
An out-of-bounds read vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation requires user interaction in that a victim must open a malicious file.
Risk Assessment
An attacker may read data outside the permitted memory range, potentially resulting in disclosure of sensitive information. The risk is real because merely opening a malicious file by a user is sufficient.
Recommendation
Update Adobe Animate to the latest version available from the vendor. Avoid opening files from untrusted sources.
Other vulnerabilities in Adobe Animate
See all- CVE-2016-7866Critical
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2026-48349High
An Incorrect Authorization vulnerability in Animate could allow arbitrary code execution in the context of the current user. Exploitation does not require user interaction but depends on conditions beyond the attacker's control. The scope of the vulnerability has changed.
- CVE-2025-54270Medium
A NULL Pointer Dereference vulnerability in Adobe Animate versions 23.0.13, 24.0.10 and earlier could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation requires user interaction in that a victim must open a malicious file.
Original NVD description (English source)
Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS