{"affected":[{"defaultStatus":"unaffected","product":"Audition","source":"CNA: adobe","vendor":"Adobe","versions":[{"lessThanOrEqual":"26.5","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"26.5.3","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"Audition","source":"CNA: adobe","vendor":"Adobe","versions":[{"lessThanOrEqual":"25.6.6","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"27.0","versionType":"semver"}]}],"cveId":"CVE-2026-113549","cwes":["CWE-476"],"description":"Audition is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.5,"severity":"medium","source":"CNA: adobe","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},{"score":5.5,"severity":"medium","source":"NVD: psirt@adobe.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794374363990,"publishedAt":1794343655558,"references":[{"source":"CNA: adobe","tags":["vendor-advisory"],"url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html"},{"source":"psirt@adobe.com","tags":[],"url":"https://www.adobe.com/trust/security/products/audition/apsb26-102.html"}],"remediation":[],"revision":"efc88e4594b9fba63ebd86af7d8a43455846ca3aa31ce85304279925129f7982","sources":[{"modifiedAt":1794373014810,"name":"CNA: adobe","retrievedAt":1794373754399,"url":"https://www.cve.org/CVERecord?id=CVE-2026-113549"},{"modifiedAt":1794374363990,"name":"NVD","retrievedAt":1794377943519,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113549"}],"ssvc":{"assessedAt":1794268800000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Audition | NULL Pointer Dereference (CWE-476)","updatedAt":1794377943519}