CVE-2021-40783: Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40783?
CVE-2021-40783 is a memory corruption vulnerability in Adobe Premiere Rush version 1.5.16 and earlier, which can result in arbitrary code execution.
How does CVE-2021-40783 impact Adobe Premiere Rush users?
CVE-2021-40783 can allow an attacker to execute arbitrary code in the context of the current user if a malicious WAV file is opened in Adobe Premiere Rush.
What is the severity of CVE-2021-40783?
CVE-2021-40783 has a severity rating of 7.8 (high).
Is Microsoft Windows affected by CVE-2021-40783?
No, Microsoft Windows is not affected by CVE-2021-40783.
How can I protect myself from CVE-2021-40783?
To protect yourself from CVE-2021-40783, update Adobe Premiere Rush to version 1.5.17 or later, as this vulnerability has been patched in that version.