CVE-2021-35991: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
Adobe Bridge version 11.0.2 (and earlier) is affected by an uninitialized variable vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Other sources
Adobe Bridge version 11.0.2 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-35991.
What is the severity of CVE-2021-35991?
The severity of CVE-2021-35991 is medium with a CVSS score of 3.3.
Which version of Adobe Bridge is affected by CVE-2021-35991?
Adobe Bridge version 11.0.2 (and earlier) is affected by CVE-2021-35991.
How can an attacker leverage CVE-2021-35991?
An unauthenticated attacker could leverage CVE-2021-35991 to disclose arbitrary memory information in the context of the current user.
Is Microsoft Windows affected by CVE-2021-35991?
No, Microsoft Windows is not affected by CVE-2021-35991.
Where can I find more information about CVE-2021-35991?
You can find more information about CVE-2021-35991 at https://helpx.adobe.com/security/products/bridge/apsb21-53.html.
What are the Common Weakness Enumeration (CWE) IDs associated with CVE-2021-35991?
The Common Weakness Enumeration (CWE) IDs associated with CVE-2021-35991 are CWE-908, CWE-20, and CWE-824.