CVE-2021-36051: XMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code Execution
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-36051?
CVE-2021-36051 refers to a buffer overflow vulnerability in the XMP Toolkit SDK that could allow arbitrary code execution.
How does CVE-2021-36051 affect XMP Toolkit SDK?
CVE-2021-36051 affects XMP Toolkit SDK version 2020.1 and earlier.
What is the severity of CVE-2021-36051?
The severity of CVE-2021-36051 is high, with a CVSS score of 7.8.
How can CVE-2021-36051 be exploited?
Exploitation of CVE-2021-36051 requires user interaction, where a victim must open a specially-crafted .cpp file.
Are there any fixes or patches available for CVE-2021-36051?
Yes, Adobe has released a security advisory and recommends updating to the latest version of XMP Toolkit SDK to address CVE-2021-36051.