CVE-2015-8445: Adobe Air

High severity, CVSS 9.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Integer overflow in the Shader filter implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via a large BitmapData source object.

Affected products

• Adobe Air: up to and including 19.0.0.241
• Adobe Air SDK: up to and including 19.0.0.241
• Adobe Air SDK & Compiler: up to and including 19.0.0.241
• Adobe Flash Player: up to and including 11.2.202.548; up to and including 18.0.0.261; version 19.0.0.185 only; version 19.0.0.207 only; version 19.0.0.226 only; version 19.0.0.245 only

Published 2015-12-10. Last modified 2026-06-17.