{"id":"CVE-2026-113512","kind":"vulnerability","aliases":["CVE-2026-113512"],"related":[],"title":"Adobe After Effects: stack buffer overflow lets a malicious file run code","description":"After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","summary":"Adobe After Effects has a stack-based buffer overflow that can be triggered by opening a malicious file. A successful attack can run arbitrary code with the privileges of the current user.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"After Effects","fixed":["27.0","26.5.3"],"affected":"<= 26.5, <= 25.6.6 (Windows and macOS)","ecosystem":"vendor"}],"ecosystems":[],"tags":["adobe-after-effects","creative-workstations","macos","other","user-interaction","windows"],"not_affected_if":["after-effects-26.5.3-or-later","after-effects-27.0-or-later","no-after-effects-installed"],"how_to_check":"Open After Effects > About After Effects (or the Creative Cloud app) and read the version. Exposed if it is 26.5 or earlier (fixed in 26.5.3), or 25.6.6 or earlier. Fixed: 27.0 or 26.5.3.","fix":"Update Adobe After Effects to 27.0, or 26.5.3 on the 26.x line, via Creative Cloud desktop app or Download Center. Adobe's bulletin lists no fixed build for the 25.6 line; the affected range includes 25.6.6 and earlier, so move to 26.5.3 or 27.0.","status":"open","published_at":"2026-11-10T21:18:42+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","triaged_at":"2026-11-10T21:48:16+00:00","updated_at":"2026-11-10T22:01:25+00:00","category":"other","confidence":0.9,"triage":{"at":"2026-11-10T21:48:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Adobe After Effects: stack buffer overflow lets a malicious file run code","impact":"high","summary":"Adobe After Effects has a stack-based buffer overflow that can be triggered by opening a malicious file. A successful attack can run arbitrary code with the privileges of the current user.","audience":"businesses","category":"other","nicknames":[],"who_cares":["adobe-after-effects","creative-workstations"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"code runs as the logged-in user on the workstation","analyst_note":"Find Adobe's security bulletin for this CVE to confirm affected and fixed versions and the list of file types involved.","how_to_check":"- Check the installed After Effects version in the application's About screen or Creative Cloud app\n- Compare the installed version against the fixed versions listed by Adobe (unknown from these sources)","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-after-effects-installed"],"who_is_affected":"Teams that run Adobe After Effects on workstations and open project or media files from outside sources are exposed. The sources do not name affected version ranges. Teams that do not use After Effects can skip it.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000686,"input_tokens":4528,"output_tokens":467,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Adobe's security bulletin for this CVE to confirm affected and fixed versions and the list of file types involved.","search":"'-113512':15A,18A '-2026':14A,17A 'adob':1A,22B,34B 'adobe-after-effect':21B 'affect':70C 'after':19A 'arbitrari':58B,83C 'attack':55B 'base':41B,75C 'buffer':5A,42B,76C 'code':12A,59B,84C 'context':88C 'could':80C 'creativ':26B 'creative-workst':25B 'current':65B,91C 'cve':13A,16A 'effect':3A,24B,36B,68C 'effects':20A 'execut':85C 'exploit':93C 'file':10A,52B,108C 'interact':32B,99C 'issu':96C 'let':7A 'maco':28B 'malici':9A,51B,107C 'must':104C 'open':49B,105C 'overflow':6A,43B,77C 'privileg':62B 'requir':97C 'result':81C 'run':11A,57B 'stack':4A,40B,74C 'stack-bas':39B,73C 'success':54B 'trigger':47B 'user':31B,66B,92C,98C 'user-interact':30B 'victim':103C 'vulner':78C 'window':33B 'workstat':27B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Adobe After Effects 26.5 or earlier, or 25.6.6 or earlier, on Windows or macOS is affected. An attacker needs a victim to open a malicious file, and code then runs with that user's privileges, so look at workstations that open project or media files from clients, freelancers or downloads. Adobe does not name the file types involved. Teams without After Effects can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T22:01:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","run_id":2905},"products":{"at":"2026-11-10T22:01:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","run_id":2905},"how_to_check":{"at":"2026-11-10T22:01:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","run_id":2905},"who_affected":{"at":"2026-11-10T22:01:25Z","by":"analyst","doc":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","run_id":2905}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["aftereffects","effects"],"ptokens":["after","effects"],"labels":["adobeaftereffects","creativeworkstations","high","macos","other","userinteraction","windows"],"campaign_type":null,"search_a":"'-113512':15A,18A '-2026':14A,17A 'adob':1A 'after':19A 'buffer':5A 'code':12A 'cve':13A,16A 'effect':3A 'effects':20A 'file':10A 'let':7A 'malici':9A 'overflow':6A 'run':11A 'stack':4A","search_b":"'adob':22B,34B 'adobe-after-effect':21B 'arbitrari':58B 'attack':55B 'base':41B 'buffer':42B 'code':59B 'creativ':26B 'creative-workst':25B 'current':65B 'effect':24B,36B 'file':52B 'interact':32B 'maco':28B 'malici':51B 'open':49B 'overflow':43B 'privileg':62B 'run':57B 'stack':40B 'stack-bas':39B 'success':54B 'trigger':47B 'user':31B,66B 'user-interact':30B 'window':33B 'workstat':27B","search_c":"'affect':70C 'arbitrari':83C 'base':75C 'buffer':76C 'code':84C 'context':88C 'could':80C 'current':91C 'effect':68C 'execut':85C 'exploit':93C 'file':108C 'interact':99C 'issu':96C 'malici':107C 'must':104C 'open':105C 'overflow':77C 'requir':97C 'result':81C 'stack':74C 'stack-bas':73C 'user':92C,98C 'victim':103C 'vulner':78C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T21:18:42+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"psirt@adobe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-113512","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113512","severity":null,"published_at":"2026-11-10T21:18:42+00:00","modified_at":"2026-11-10T21:18:42+00:00","first_seen_at":"2026-11-10T21:46:09+00:00","fetched_at":"2026-11-10T21:46:09+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-113512:2905","url":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","severity":null,"published_at":"2026-11-10T22:01:25+00:00","modified_at":"2026-11-10T22:01:25+00:00","first_seen_at":"2026-11-10T22:01:25+00:00","fetched_at":"2026-11-10T22:01:25+00:00","note":"Read Adobe APSB26-100 (Nov 10 2026, priority 3): affected 26.5 and earlier / 25.6.6 and earlier; fixed 27.0 and 26.5.3; no exploitation known. Adobe does not list file types.","cites":["https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html"]}],"documents":[{"id":119294,"url":"https://www.adobe.com/trust/security/products/after-effects/apsb26-100.html","title":"Adobe APSB26-100: Security update available for Adobe After Effects","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}