PT-2021-5521 · Adobe · Media Encoder

Published 2021-12-14 · Updated 2023-08-01 · CVE-2021-43756

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 15.4.2 and earlier Adobe Media Encoder version 22.0

Description The issue is related to an out-of-bounds write operation in memory. It may allow an attacker to execute arbitrary code, given that a user opens a malicious file, thus requiring user interaction. The exploitation can lead to code execution in the context of the current user.

Recommendations For Adobe Media Encoder versions 15.4.2 and earlier, update to a version that contains a fix for this issue. For Adobe Media Encoder version 22.0, update to a version that contains a fix for this issue.

Fix

Buffer Overflow

Access of Memory Location After End of Buffer

Memory Corruption

Weakness Enumeration

CWE-119

CWE-788

CWE-787

Related Identifiers

BDU:2021-06371

CVE-2021-43756

Affected Products

Media Encoder

References · 5

• https://bdu.fstec.ru/vul/2021-06371 · Security Note
• https://helpx.adobe.com/security/products/media-encoder/apsb21-118.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43756 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021121604 · Note