CVE-2023-47060: low-severity vulnerability in Adobe Premiere Pro
ZDI-CAN-21792: Adobe Premiere Pro MP4 File Uninitialized Variable Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.3%
Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
Adobe · Premiere ProRelated CVEs — Adobe Premiere Pro
In the same product, most dangerous first.
CVE-2024-20745HIGHZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2024-53956HIGHPremiere Pro | Heap-based Buffer Overflow (CWE-122)EPSS 0.5%CVE-2024-20746HIGHAdobe Premiere Pro Out-of-bounds Write Arbitrary code executionEPSS 0.5%CVE-2023-47055HIGHZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution VulnerabilityEPSS 0.4%CVE-2025-27196HIGHPremiere Pro | Heap-based Buffer Overflow (CWE-122)EPSS 0.4%CVE-2023-47056HIGHZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%