CVE-2021-40732NULL Pointer Dereference in Adobe XMP Toolkit

Severity
6.1MEDIUMNVD
EPSS
0.1%
top 64.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 13
Latest updateJun 16

Description

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:HExploitability: 1.8 | Impact: 4.2

Affected Packages3 packages

CVEListV5adobe/xmp_toolkitunspecified2020.1+1
Debianexempi_project/exempi< 2.5.2-1+deb11u1+3

Also affects: Debian Linux 10.0

🔴Vulnerability Details

3
GHSA
GHSA-3gp9-w4vx-8hh2: XMP Toolkit version 20202022-05-24
CVEList
XMP Toolkit SDK Null Pointer Dereference2021-10-13
OSV
CVE-2021-40732: XMP Toolkit version 20202021-10-13

📋Vendor Advisories

2
Ubuntu
Exempi vulnerabilities2022-06-16
Debian
CVE-2021-40732: exempi - XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereferen...2021
CVE-2021-40732 — NULL Pointer Dereference in Adobe | cvebase