Adobe Premiere Rush PSD files Use After Free Arbitrary code execution
CVE-2023-22244

7.8HIGH

Key Information:

Vendor
Adobe
Vendor
CVE Published:
17 February 2023

Summary

Adobe Premiere Rush versions up to and including 2.6 are vulnerable to a Use After Free issue, which may allow an attacker to execute arbitrary code through a maliciously crafted file. Successful exploitation of this vulnerability requires user interaction, as the user must open the compromised file. This raises significant security concerns, as it can potentially lead to unauthorized actions on the user's system.

Affected Version(s)

Premiere Rush <= 2.6

Premiere Rush <= unspecified

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.