CVE-2021-43028

published 2021-12-20

CVE-2021-43028: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
adobe	premiere_rush	<= 1.5.16	—
adobe	premiere_rush	unspecified – 1.5.16	—

CWE-788 CWE-787