PT-2021-5702 · Adobe · Premiere Rush

Published 2021-12-14 · Updated 2023-06-26 · CVE-2021-40783

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Premiere Rush versions 1.5.16 and earlier

Description The issue is caused by a memory corruption vulnerability due to insecure handling of a malicious WAV file. This could potentially result in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Recommendations For Adobe Premiere Rush versions 1.5.16 and earlier, update to a version that fixes the memory corruption vulnerability to prevent potential arbitrary code execution.

Fix

Buffer Overflow

Access of Memory Location After End of Buffer

Weakness Enumeration

CWE-119

CWE-788

Related Identifiers

BDU:2022-00141

CVE-2021-40783

Affected Products

Premiere Rush

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-40783 · Security Note
• https://helpx.adobe.com/security/products/premiere_rush/apsb21-101.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00141 · Security Note
• https://osv.dev/vulnerability/CVE-2021-40783 · Vendor Advisory