CVE-2021-35985: Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-35985?
CVE-2021-35985 is rated as a high severity vulnerability due to its potential to cause a denial-of-service attack.
How do I fix CVE-2021-35985?
To fix CVE-2021-35985, update Adobe Acrobat Reader DC to version 21.005.20055 or later, or apply any available patches.
Which versions of Acrobat Reader DC are affected by CVE-2021-35985?
Adobe Acrobat Reader DC versions 21.005.20054 and earlier, as well as several earlier versions of Acrobat DC and Acrobat Reader DC are affected by CVE-2021-35985.
Can CVE-2021-35985 be exploited remotely?
Yes, CVE-2021-35985 can potentially be exploited by an unauthenticated attacker, making it a significant risk for remote exploitation.
What type of vulnerability is CVE-2021-35985?
CVE-2021-35985 is a null pointer dereference vulnerability that can result in application denial of service.