CVE-2021-40792: Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution

Q: What is CVE-2021-40792?

CVE-2021-40792 is a memory corruption vulnerability in Adobe Premiere Pro version 15.4.1 (and earlier) that allows for arbitrary code execution.

Q: How does CVE-2021-40792 impact Adobe Premiere Pro?

CVE-2021-40792 can result in arbitrary code execution in the context of the current user in Adobe Premiere Pro version 15.4.1 (and earlier).

Q: What is the severity of CVE-2021-40792?

The severity of CVE-2021-40792 is high with a CVSS score of 7.8.

Q: How can CVE-2021-40792 be exploited?

CVE-2021-40792 requires user interaction to exploit, typically through the handling of a malicious file.

Q: Is Apple macOS or Microsoft Windows affected by CVE-2021-40792?

No, Apple macOS and Microsoft Windows are not affected by CVE-2021-40792.

Published Mar 16, 2022

Updated

Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected Software

3 affected components

Adobe Premiere Pro<=15.4.1

macOS

Microsoft Windows

Remediation

Patch Available

https://helpx.adobe.com/security/products/premiere_pro/apsb21-100.html

Event History

Mar 16, 2022

CVE Published

via MITRE·02:03 PM

Data Sourced

via MITRE·02:03 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-40792?

CVE-2021-40792 is a memory corruption vulnerability in Adobe Premiere Pro version 15.4.1 (and earlier) that allows for arbitrary code execution.

How does CVE-2021-40792 impact Adobe Premiere Pro?