CVE-2025-43556
📊 7.8 HIGH⚡ 0.0%🎯 0 exploits
📅 Published May 13, 2025
📋 Status: Analyzed
Animate versions 24.0.8, 23.0.11 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS v3.1 • [email protected]
🎯 Affected Products & Systems
4 product configurations affected
Filter by type:
| Type | Vendor | Product | Version Range | Status | CPE String |
|---|---|---|---|---|---|
📱App | adobe | animate | ≥ 23.0.0 ∧ < 23.0.12 | Vulnerable | cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:* |
📱App | adobe | animate | ≥ 24.0.0 ∧ < 24.0.9 | Vulnerable | cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:* |
💻OS | apple | macos | All versions | Not Vulnerable | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
💻OS | microsoft | windows | All versions | Not Vulnerable | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
Version: ≥ 23.0.0 ∧ < 23.0.12
CPE:
cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*
Version: ≥ 24.0.0 ∧ < 24.0.9
CPE:
cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector:
LOCAL
Complexity:
LOW
Privileges:
NONE
User Interaction:
REQUIRED
Confidentiality:
HIGH
Integrity:
HIGH
Availability:
HIGH
Scope:
UNCHANGED
🔍 Technical Details
Analysis Status
AnalyzedCVSS Details
7.8 (HIGH)v3.1
Source: [email protected]
EPSS Details
0.0% (Minimal)6.3th percentile
Last updated: Oct 30, 2025
Exploitation probability within 30 days
Published Date
May 13, 2025 (5 months ago)
Last Modified
May 15, 2025 (5 months ago)
Security Weaknesses1
CWE-190
References2
NVDgeneral