What’s Vulnerable › Vulnerabilities

CVE-2012-5054: Adobe Flash Player Integer Overflow Vulnerability

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-06-08
• EPSS: 21.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-09-24 · updated 2026-06-16
• Weakness: CWE-190

Description

Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed arguments.

Affected products

• Adobe Flash Player 24.0.0.186 and earlier.: before 11.4.402.265 — fixed in 11.4.402.265

How to fix

Upgrade to a fixed version: Adobe Flash Player 24.0.0.186 and earlier. 11.4.402.265. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
• http://www.adobe.com/support/security/bulletins/apsb12-19.html
• http://www.vupen.com/english/services/ba-index.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
• http://packetstormsecurity.org/files/116435/Adobe-Flash-Player-Matrix3D-Integer-Overflow-Code-Execution.html
• http://www.adobe.com/support/security/bulletins/apsb12-19.html
• http://www.vupen.com/english/services/ba-index.php
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78866
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-5054

Get alerted when CVE-2012-5054 or the next vulnerability affects your stack