CVE-2021-36054: XMP Toolkit SDK Heap-based Buffer Overflow in the PSD_MetaHandler::CacheFileData Could Lead To Application Denial Of Service
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36054?
CVE-2021-36054 has a high severity rating due to its potential to cause local application denial of service.
How do I fix CVE-2021-36054?
To fix CVE-2021-36054, update the XMP Toolkit SDK to version 2020.2 or later.
Who is affected by CVE-2021-36054?
CVE-2021-36054 affects users of Adobe XMP Toolkit SDK versions prior to 2020.2 and Debian Linux 10.0.
Can exploiting CVE-2021-36054 lead to remote code execution?
No, exploiting CVE-2021-36054 specifically leads to local application denial of service and does not enable remote code execution.
What are the prerequisites for exploiting CVE-2021-36054?
Exploiting CVE-2021-36054 requires user interaction, where a victim must open a specially crafted file.