CVE-2021-39844: Adobe Acrobat Reader CalRGB Out-of-Bounds Read Vulnerability
Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-39844?
CVE-2021-39844 has a severity rating that indicates it could potentially lead to disclosure of sensitive memory information.
How do I fix CVE-2021-39844?
To fix CVE-2021-39844, ensure you update to the latest version of Adobe Acrobat Reader DC or Adobe Acrobat DC that addresses this vulnerability.
What versions of Adobe software are affected by CVE-2021-39844?
CVE-2021-39844 affects Adobe Acrobat Reader DC versions up to 21.005.20060, 2020.004.30006, and 2017.011.30199, along with earlier versions.
Can CVE-2021-39844 be exploited remotely?
CVE-2021-39844 does not indicate a direct remote exploit vector but could be exploited in the context of the current user.
What types of systems are at risk from CVE-2021-39844?
CVE-2021-39844 primarily affects systems running vulnerable versions of Adobe Acrobat software on Windows and macOS.