CVE-2021-36064: XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36064?
CVE-2021-36064 is considered a medium severity vulnerability due to the potential for arbitrary code execution through user interaction.
How do I fix CVE-2021-36064?
To fix CVE-2021-36064, users should upgrade to the latest version of Adobe XMP Toolkit that addresses the vulnerability.
What impact does CVE-2021-36064 have on my system?
CVE-2021-36064 could allow an attacker to execute arbitrary code on the victim's system if they open a specially crafted file.
Which software versions are affected by CVE-2021-36064?
CVE-2021-36064 affects Adobe XMP Toolkit version 2020.1 and earlier, as well as specific Debian versions.
Is user interaction required to exploit CVE-2021-36064?
Yes, exploitation of CVE-2021-36064 requires user interaction, such as opening a malicious file.