CVE-2021-43025: Adobe Premiere Rush SVG File Memory Corruption Remote Code Execution
Published Dec 20, 2021
·Updated
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
4 affected components
All of the following
Adobe Premiere Rush<=1.5.16
Microsoft Windows
Adobe Premiere Rush<=1.5.16
Microsoft Windows
Event History
Dec 20, 2021
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Adobe Premiere Rush vulnerability?
The vulnerability ID for this Adobe Premiere Rush vulnerability is CVE-2021-43025.
2
What is the severity rating for CVE-2021-43025?
CVE-2021-43025 has a severity rating of 7.8 (critical).
3
What is the affected software version of Adobe Premiere Rush?
Adobe Premiere Rush version 1.5.16 and earlier are affected by this vulnerability.
4
How is this vulnerability exploited?
This vulnerability is exploited through insecure handling of a malicious SVG file, requiring user interaction.
5
Is Microsoft Windows affected by this vulnerability?
No, Microsoft Windows is not affected by this vulnerability.