CVE-2021-42533

Summary

Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Affected Software

Weaknesses

• CWE-415: Double Free (CWE-415)

ADP Enrichment

CVE Program Container

Additional References

• https://helpx.adobe.com/security/products/bridge/apsb21-94.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://helpx.adobe.com/security/products/bridge/apsb21-94.html

• ←Previous
• Next→