CVE-2022-23204: fallo de gravedad media en Adobe Premiere Rush
Adobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5epss 1.9%
Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
Adobe · Premiere RushCVEs relacionadas — Adobe Premiere Rush
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-43024HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43022HIGHAdobe Premiere Rush PNG File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43747HIGHAdobe Premiere Rush WAV File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43021HIGHAdobe Premiere Rush EXR File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43029HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%CVE-2021-43028HIGHAdobe Premiere Rush M4A File Memory Corruption Remote Code ExecutionEPSS 2.3%