Adobe Premiere Rush vulnerabilities

CVE-2023-22234 [HIGH] CWE-121 CVE-2023-22234: Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerabi Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2023-22244 [HIGH] CWE-416 CVE-2023-22244: Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that cou Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2022-23204 [MEDIUM] CWE-125 CVE-2022-23204: Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability tha Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-43029 [HIGH] CWE-788 CVE-2021-43029: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-40783 [HIGH] CWE-788 CVE-2021-40783: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43028 [HIGH] CWE-788 CVE-2021-43028: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-40784 [HIGH] CWE-788 CVE-2021-40784: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43025 [HIGH] CWE-788 CVE-2021-43025: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43023 [HIGH] CWE-788 CVE-2021-43023: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43026 [HIGH] CWE-788 CVE-2021-43026: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43021 [HIGH] CWE-788 CVE-2021-43021: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43747 [HIGH] CWE-788 CVE-2021-43747: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43024 [HIGH] CWE-787 CVE-2021-43024: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43022 [HIGH] CWE-788 CVE-2021-43022: Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability du Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVE-2021-43749 [MEDIUM] CWE-476 CVE-2021-43749: Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnera Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-43746 [MEDIUM] CWE-824 CVE-2021-43746: Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerab Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist

CVE-2021-43750 [MEDIUM] CWE-476 CVE-2021-43750: Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnera Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-43748 [MEDIUM] CWE-476 CVE-2021-43748: Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnera Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-43030 [LOW] CWE-824 CVE-2021-43030: Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerab Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t

CVE-2020-9617 [MEDIUM] CWE-125 CVE-2020-9617: Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.