CVE-2021-36053: low-severity vulnerability in Adobe XMP Toolkit
XMP Toolkit SDK Out-of-bounds Read Vulnerability In FindAndReadXMPChunk Could Lead To Information Exposure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 2.0%
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Adobe · XMP ToolkitRelated CVEs — Adobe XMP Toolkit
In the same product, most dangerous first.
CVE-2021-36051HIGHXMP Toolkit SDK Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.8%CVE-2021-39847HIGHXMP Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.4%CVE-2021-36050HIGHXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 5.4%CVE-2021-36056MEDIUMXMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 4.4%CVE-2021-42529HIGHXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 3.9%CVE-2021-42531HIGHXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code ExecutionEPSS 3.9%