CVE-2021-43029: Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43029?
CVE-2021-43029 is a memory corruption vulnerability affecting Adobe Premiere Rush version 1.5.16 and earlier.
How can this vulnerability be exploited?
This vulnerability can be exploited by a malicious M4A file, requiring user interaction to execute arbitrary code.
What is the severity of CVE-2021-43029?
CVE-2021-43029 has a severity rating of 7.8 (critical).
Which software versions are affected by CVE-2021-43029?
Adobe Premiere Rush version 1.5.16 and earlier are affected by CVE-2021-43029.
How can I fix CVE-2021-43029?
To fix CVE-2021-43029, users should update to a newer version of Adobe Premiere Rush that is not affected by this vulnerability.