CVE-2021-45063: Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability
Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-45063?
CVE-2021-45063 has been classified as a critical vulnerability due to its potential for sensitive memory disclosure.
How do I fix CVE-2021-45063?
To fix CVE-2021-45063, users should update to the latest versions of Adobe Acrobat Reader DC and Adobe Acrobat.
What software versions are affected by CVE-2021-45063?
CVE-2021-45063 affects Adobe Acrobat Reader DC versions 21.007.20099 and earlier, 20.004.30017 and earlier, and Adobe Acrobat versions 17.011.30204 and earlier.
What type of vulnerability is CVE-2021-45063?
CVE-2021-45063 is a use-after-free vulnerability that occurs during the processing of Format event actions.
Can CVE-2021-45063 be exploited remotely?
Yes, CVE-2021-45063 can be exploited by an attacker to potentially disclose sensitive memory remotely.