CVE-2021-40715

Summary

Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability.

Affected Software

VendorProductVersion RangeStatus
AdobePremiereunspecified <= 15.4affected
AdobePremiereunspecified <= Noneaffected

Weaknesses

  • CWE-788: Access of Memory Location After End of Buffer (CWE-788)

ADP Enrichment

CVE Program Container

Additional References

References