Adobe Premiere Rush PSD files Use After Free Arbitrary code execution
CVE-2023-22244
7.8HIGH
Summary
Adobe Premiere Rush versions up to and including 2.6 are vulnerable to a Use After Free issue, which may allow an attacker to execute arbitrary code through a maliciously crafted file. Successful exploitation of this vulnerability requires user interaction, as the user must open the compromised file. This raises significant security concerns, as it can potentially lead to unauthorized actions on the user's system.
Affected Version(s)
Premiere Rush <= 2.6
Premiere Rush <= unspecified
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved