CVE-2024-12797 - Vulnerability of OpenSSL libraries

[volk7]

Hello, good day. I am a vulnerability analyst and recently an alert has come out regarding CVE-2024-12797, where your application is exposed through the OpenSSL versions of your “libcrypto-3-x64.dll” and “libssl-3-x64.dll” files using OpenSSL version 3.2.1.0. I would be grateful if you could let me know an estimated date, when it will be possible to upgrade to OpenSSL version 3.2.4.0 in the mentioned libraries. These detections occur through the plugin “mochaae” that is integrated with After Effects, in a path as “adobe media encoder 2025 ”aftereffectslib", which is triggering the exposure of the Adobe Media Encoder (25.2) and Adobe Premier Pro (25.2.3) applications.

[Kevin-Monahan]

HI @volk7,

Thanks for the message. I let the developers know about this issue. I hope they will reply shortly.

Thanks,
Kevin

[Kovac_NZ]

Are the OpenSSL component vulnerabilities still an issue in some Adobe Products?

Adobe Acrobat appears to have been updated but I'm still getting alerted for some products like After Effects, Photoshop, Premiere etc

c:\program files\adobe\adobe photoshop 2025\libssl-3-x64.dll
c:\program files\adobe\adobe photoshop 2025\libcrypto-3-x64.dll