CVE-2021-36050: XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36050?
CVE-2021-36050 is classified as a high-severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2021-36050?
To fix CVE-2021-36050, update to Adobe XMP Toolkit SDK version 2020.2 or later.
What are the consequences of exploiting CVE-2021-36050?
Exploitation of CVE-2021-36050 can lead to arbitrary code execution, allowing an attacker to execute commands on the affected system.
Which software versions are affected by CVE-2021-36050?
Affected software includes Adobe XMP Toolkit SDK version 2020.1 and earlier, as well as Debian Debian Linux version 10.0.
Is user interaction required to exploit CVE-2021-36050?
Yes, user interaction is required as the victim must open a crafted file for the exploitation of CVE-2021-36050 to occur.