CVE-2021-36045

Katalog CVE

CVSS 3.3 · Low EPSS 1,9%

Kerentanan Out-of-bounds Read pada adobe xmp toolkit software development kit, debian linux. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Rincian

Terbit di NVD

1 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/08/msg00003.html