EUVD-2026-29612
GHSA-qrqj-43q2-vj6m
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Local file-open attack (AV:L, UI:R) needing no prior privileges (PR:N); an integer-overflow memory corruption yields full code execution as the user, so C/I/A all High.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Media Encoder versions 26.0.2, 25.6.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe Media Encoder 26.0.2, 25.6.4 and earlier lets an attacker run code in the context of the current user when a victim opens a maliciously crafted media file. The flaw is an integer overflow (CWE-190) during file parsing; exploitation requires local user interaction and is not remotely triggerable. No public exploit identified at time of analysis, and EPSS is very low (0.03%), consistent with CISA SSVC recording no known exploitation.
Technical ContextAI
Adobe Media Encoder is a desktop media transcoding and rendering application (cpe:2.3:a:adobe:media_encoder) commonly paired with Premiere Pro and After Effects. The root cause is CWE-190 (Integer Overflow or Wraparound): while parsing attacker-controlled media/project file data, an arithmetic computation - typically a size, length, or offset field - wraps past its integer bounds, producing an undersized allocation or miscalculated index. The subsequent memory operation writes out of bounds, corrupting heap or stack memory in a way that can be steered into arbitrary code execution within the current user's session.
RemediationAI
Apply the Adobe security update referenced in advisory APSB26-47 (https://helpx.adobe.com/security/products/media-encoder/apsb26-47.html) - patch available per vendor advisory; consult APSB26-47 for the exact fixed build for your 26.x and 25.x trains and upgrade past 26.0.2 / 25.6.4. Until patched, reduce exposure by treating Media Encoder project and media files from untrusted sources as unsafe: do not open files received via email, download, or shared drives from unverified senders, and process untrusted media only on isolated/non-privileged workstations. Because the attack vector is local file-open, the practical compensating control is user-side handling discipline and running the application under a least-privileged account so code execution is confined to a low-impact user context; the trade-off is workflow friction for teams that ingest third-party media routinely.
More in Media Encoder
View allAdobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Rated critical severity (CVSS 9
Adobe Media Encoder version 13.0.2 has a use-after-free vulnerability. Rated high severity (CVSS 8.8), this vulnerabilit
Media Encoder versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re
Media Encoder versions 25.1, 24.6.4 and earlier are affected by an out-of-bounds write vulnerability that could result i
Arbitrary code execution in Adobe Media Encoder (versions 26.0.2, 25.6.4 and earlier) stems from an out-of-bounds write
Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result i
Media Encoder versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could re
Media Encoder versions 25.0, 24.6.3 and earlier are affected by an out-of-bounds write vulnerability that could result i
Media Encoder versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result i
Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could
Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerabil
Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vul
Same weakness CWE-190 – Integer Overflow or Wraparound
View allShare
External POC / Exploit Code
Leaving vuln.today