CVE-2021-40782: Adobe Media Encoder Null Pointer Dereference Application denial-of-service
Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-40782?
CVE-2021-40782 is a null pointer dereference vulnerability in Adobe Media Encoder 15.4.1 (and earlier) that can be exploited by an unauthenticated attacker to cause a denial-of-service.
How does CVE-2021-40782 affect Adobe Media Encoder?
CVE-2021-40782 affects Adobe Media Encoder 15.4.1 (and earlier) by causing a null pointer dereference vulnerability, leading to a denial-of-service condition.
What is the severity of CVE-2021-40782?
The severity of CVE-2021-40782 is medium, with a severity value of 5.5.
How can an attacker exploit CVE-2021-40782?
An attacker can exploit CVE-2021-40782 by parsing a specially crafted file to trigger the null pointer dereference vulnerability and cause a denial-of-service.
How can I mitigate CVE-2021-40782?
To mitigate CVE-2021-40782, it is recommended to update Adobe Media Encoder to version 15.4.2 or later, as specified in the Adobe Security Bulletin APSB21-99.