CVE-2021-40784: Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40784?
CVE-2021-40784 is a memory corruption vulnerability in Adobe Premiere Rush version 1.5.16 (and earlier) that allows arbitrary code execution.
How does CVE-2021-40784 work?
CVE-2021-40784 works by exploiting insecure handling of a malicious WAV file in Adobe Premiere Rush, which can lead to memory corruption and potential arbitrary code execution.
What is the severity of CVE-2021-40784?
The severity of CVE-2021-40784 is high with a CVSS score of 7.8.
What version of Adobe Premiere Rush is affected by CVE-2021-40784?
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by CVE-2021-40784.
How do I fix CVE-2021-40784?
To fix CVE-2021-40784, users should update Adobe Premiere Rush to the latest version, as recommended by the vendor.