Vulnerability in Adobe Premiere Rush
CVE-2021-43746
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.
EPSS: 0.017 (75.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
Affected products
- Adobe Premiere Rush — versions unspecified
- Adobe Premiere_rush
- Microsoft Windows
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-43746?
- CVE-2021-43746 is a medium-severity vulnerability in Adobe Premiere Rush, classified under Access of Uninitialized Pointer. CVSS score: 5.5/10. Published 2021-12-20.
- How severe is CVE-2021-43746?
- Medium severity. CVSS v3 base score is 5.5 out of 10.