CVE-2021-21054: Adobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code Execution Vulnerability
Adobe Illustrator version 25.1 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21054?
CVE-2021-21054 is considered to have high severity due to the potential for arbitrary code execution.
How do I fix CVE-2021-21054?
To fix CVE-2021-21054, update Adobe Illustrator to version 25.2 or later.
Who is affected by CVE-2021-21054?
Users of Adobe Illustrator version 25.1 and earlier are affected by CVE-2021-21054.
What type of attack does CVE-2021-21054 allow?
CVE-2021-21054 allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Can I exploit CVE-2021-21054 remotely?
CVE-2021-21054 can potentially be exploited remotely by an attacker through a crafted file.