CVE-2021-43022: Adobe Premiere Rush PNG File Memory Corruption Remote Code Execution
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43022?
CVE-2021-43022 is a memory corruption vulnerability in Adobe Premiere Rush version 1.5.16 and earlier.
How does CVE-2021-43022 impact Adobe Premiere Rush?
CVE-2021-43022 can potentially allow arbitrary code execution in the context of the current user when a malicious PNG file is handled insecurely, requiring user interaction to exploit.
What is the severity of CVE-2021-43022?
The severity of CVE-2021-43022 is critical, with a CVSS score of 7.8.
Which software versions are affected by CVE-2021-43022?
Adobe Premiere Rush version 1.5.16 and earlier are affected by CVE-2021-43022.
How can I fix CVE-2021-43022?
Update Adobe Premiere Rush to a version later than 1.5.16 to mitigate the vulnerability.