CVE-2025-54270

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-15

Last updated on: 2025-10-17

Assigner: Adobe Systems Incorporated

Description

Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive memory information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-15

Last Modified

2025-10-17

Generated

2026-07-06

AI Q&A

2025-10-15

EPSS Evaluated

2026-07-05

NVD

CVE-2025-54270

EUVD

EUVD-2025-34496

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	animate	From 23.0.0 (inc) to 23.0.15 (exc)
adobe	animate	From 24.0.0 (inc) to 24.0.12 (exc)
apple	macos	*
microsoft	windows	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL Pointer Dereference in Animate versions 23.0.13, 24.0.10 and earlier. It can cause memory exposure, allowing an attacker to disclose sensitive memory information if a victim opens a malicious file.

Impact Analysis

The vulnerability can lead to the disclosure of sensitive memory information, potentially exposing confidential data. Exploitation requires user interaction, specifically opening a malicious file.

Mitigation Strategies

To mitigate this vulnerability, ensure that you do not open malicious files from untrusted sources. Update Animate to a version later than 23.0.13 or 24.0.10 as these versions are affected. Avoid user interaction with suspicious files to prevent exploitation.

Hi! I’m here to help you understand CVE-2025-54270. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70