CVE-2021-42529

Katalog CVE

CVSS 7.8 · High EPSS 3,9%

Kerentanan Stack-based Buffer Overflow pada adobe xmp toolkit software development kit, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.

Rincian

Terbit di NVD

2 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html advisory vendor
• https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/08/msg00003.html