Adobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

CVE-2021-40795

Summary

Adobe Premiere Pro versions 22.0 and earlier, as well as 15.4.2 and earlier, are susceptible to an out-of-bounds read vulnerability. This flaw allows an attacker to read past the end of an allocated memory structure, which could potentially lead to unauthorized code execution in the context of the current user. To exploit this vulnerability, a victim must open a specially crafted malicious file, highlighting the necessity for caution when handling untrusted files.

References