CVE-2021-39834: Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-39834.
Which software versions are affected by this vulnerability?
Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected.
What is the impact of this vulnerability?
This vulnerability could lead to the disclosure of sensitive memory and bypassing of mitigations such as ASLR.
What is the severity of CVE-2021-39834?
The severity of CVE-2021-39834 is medium with a severity score of 3.3.
How can I fix this vulnerability?
Update Adobe Framemaker to the latest version available.