VYPR
Unrated severityNVD Advisory· Published Oct 14, 2020· Updated Apr 23, 2025

Exploitable NULL pointer deref could lead to arbitrary code execution

CVE-2020-9746

Description

Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and arbitrary code execution. Exploitation of this issue requires an attacker to insert malicious strings in an HTTP response that is by default delivered over TLS/SSL.

Affected products

2
  • Adobe Inc./Flashplayerllm-fuzzy2 versions
    <=32.0.0.433+ 1 more
    • (no CPE)range: <=32.0.0.433
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.