CVE-2021-40794: Adobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code execution
Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40794?
CVE-2021-40794 is a memory corruption vulnerability in Adobe Premiere Pro version 15.4.1 (and earlier), which allows for arbitrary code execution in the context of the current user.
How does CVE-2021-40794 impact Adobe Premiere Pro?
CVE-2021-40794 can be exploited through the insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user.
What is the severity of CVE-2021-40794?
CVE-2021-40794 has a severity rating of 7.8, which is considered high.
Which versions of Adobe Premiere Pro are affected by CVE-2021-40794?
Adobe Premiere Pro version 15.4.1 and earlier are affected by CVE-2021-40794.
How can CVE-2021-40794 be mitigated?
To mitigate CVE-2021-40794, users should update to a version of Adobe Premiere Pro that is not affected by the vulnerability.