Back

CVE-2019-8246

CRITICAL

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Published: Nov 14, 2019 Modified: Jun 17, 2026
CWE-787 CWE-787

CVSS Metrics

CVSSv3
Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: UNCHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

Vendor Product Version
adobe media_encoder *

GitHub Security Advisory GHSA-cfpf-jvvq-wj6j

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds write vulnerability....

Risk Scores

CVSS Score 9.8 / 10
EPSS Score 4.58%

Top 9% most likely to be exploited

Threat Score 40.6 / 100

Data Sources

NVD EPSS GitHub