CVE-2021-40734: Adobe Audition Memory Corruption could lead to Arbitrary code execution
Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-40734?
CVE-2021-40734 is a memory corruption vulnerability in Adobe Audition version 14.4 (and earlier) when parsing a SVG file.
What is the severity level of CVE-2021-40734?
The severity level of CVE-2021-40734 is critical with a CVSS score of 7.8.
How does CVE-2021-40734 impact Adobe Audition?
CVE-2021-40734 can potentially result in arbitrary code execution in the context of the current user when exploited.
What software versions are affected by CVE-2021-40734?
Adobe Audition version 14.4 (and earlier) is affected by CVE-2021-40734.
Is Apple macOS or Microsoft Windows affected by CVE-2021-40734?
No, Apple macOS and Microsoft Windows are not affected by CVE-2021-40734.
How can CVE-2021-40734 be exploited?
User interaction is required to exploit CVE-2021-40734.
How can I fix CVE-2021-40734?
Upgrade Adobe Audition to version 14.5 or later to fix CVE-2021-40734.
Where can I find more information about CVE-2021-40734?
More information about CVE-2021-40734 can be found at the following reference: https://helpx.adobe.com/security/products/audition/apsb21-92.html
What are the Common Weakness Enumerations (CWE) associated with CVE-2021-40734?
The Common Weakness Enumerations (CWE) associated with CVE-2021-40734 are CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-788 (Access of Memory Location After End of Buffer).