CVE-2021-36073: Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage…

high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

Adobe Bridge version 11.1 (and earlier) is affected by a heap-based buffer overflow vulnerability when parsing a crafted .SGI file. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	bridge	<= 11.1	—
adobe	bridge	unspecified – 11.1	—