CVE-2024-45145
📋 TL;DR
Lightroom Desktop has an out-of-bounds read vulnerability that could allow attackers to read sensitive memory contents when users open malicious files. This could help bypass security mitigations like ASLR. Users of Lightroom Desktop versions 7.4.1, 13.5, 12.5.1 and earlier are affected.
💻 Affected Systems
- Adobe Lightroom Desktop
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Memory disclosure enables ASLR bypass, potentially facilitating more severe attacks like remote code execution through chained exploits.
Likely Case
Information disclosure of memory contents, possibly revealing sensitive data or system information.
If Mitigated
Limited impact if user doesn't open untrusted files, with only memory read without write capability.
🎯 Exploit Status
Exploitation requires user interaction (opening malicious file). No public exploit code known.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Update to Lightroom Desktop 7.4.2, 13.6, or 12.5.2 or later
Vendor Advisory: https://helpx.adobe.com/security/products/lightroom/apsb24-78.html
Restart Required: Yes
Instructions:
1. Open Lightroom Desktop. 2. Go to Help > Check for Updates. 3. Follow prompts to install latest version. 4. Restart Lightroom after installation.
🔧 Temporary Workarounds
Avoid opening untrusted files
allOnly open Lightroom files from trusted sources to prevent exploitation
🧯 If You Can't Patch
- Restrict user permissions to prevent opening untrusted files
- Implement application whitelisting to control which files can be opened
🔍 How to Verify
Check if Vulnerable:
Check Lightroom version in Help > About Lightroom. If version is 7.4.1, 13.5, 12.5.1 or earlier, system is vulnerable.Check Version:
In Lightroom: Help > About LightroomVerify Fix Applied:
Verify version is 7.4.2, 13.6, 12.5.2 or later after update.📡 Detection & Monitoring
Log Indicators:
- Unexpected application crashes
- Memory access violation errors in system logs
Network Indicators:
- No network indicators - local file-based exploit
SIEM Query:
EventID 1000 or 1001 in Windows Event Logs for Lightroom crashes