Adobe Premiere Pro Vulnerability Could Lead to Arbitrary Code Execution
CVE-2024-20746

7.8HIGH

Key Information:

Vendor
Adobe
Status
Premiere Pro
Vendor
CVE Published:
18 March 2024

Summary

An out-of-bounds write vulnerability exists in Adobe Premiere Pro, specifically affecting versions 24.1 and 23.6.2, as well as prior releases. This security flaw enables arbitrary code execution, contingent on user interaction with a malicious file. Successful exploitation necessitates that the targeted user open the compromised file, highlighting the importance of user awareness and security practices to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Premiere Pro 0 <= 23.6.2

References

https://helpx.adobe.com/security/products/premiere_pro/ap...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.