CVE-2022-23204: medium-severity vulnerability in Adobe Premiere Rush
Adobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 1.9%
Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Adobe · Premiere RushRelated CVEs — Adobe Premiere Rush
In the same product, most dangerous first.
CVE-2021-43024HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43022HIGHAdobe Premiere Rush PNG File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43747HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43021HIGHAdobe Premiere Rush EXR File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43029HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43028HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%