CVE-2021-35984: Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An authenticated attacker could leverage this vulnerability achieve an application denial-of-service in the context of the current user. Exploitation of this issue does not requires user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35984?
CVE-2021-35984 is classified as a Medium severity vulnerability.
How do I fix CVE-2021-35984?
To mitigate CVE-2021-35984, upgrade to Adobe Acrobat DC versions 2021.005.20055 or later, 2020.004.30006 or later, or 2017.011.30198 or later.
Can CVE-2021-35984 be exploited remotely?
CVE-2021-35984 requires authenticated access to exploit, limiting remote attack vectors.
Which Adobe products are affected by CVE-2021-35984?
CVE-2021-35984 affects Adobe Acrobat Reader DC versions 21.005.20054 and earlier, 2020.004.30005 and earlier, as well as 2017.011.30197 and earlier.
What impact does CVE-2021-35984 have on users?
Exploiting CVE-2021-35984 can lead to a denial-of-service condition, potentially disrupting user access to the application.