XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html | Patch Vendor Advisory |
| https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html | Mailing List |
Configurations
History
16 Feb 2024, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html - Mailing List | |
| First Time |
Debian
Debian debian Linux |
|
| CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
07 Nov 2023, 03:36
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : unknown |
26 Sep 2023, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 4.0 |
| References |
|
27 Oct 2021, 01:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:adobe:xmp_toolkit_software_development_kit:*:*:*:*:*:*:*:* |
08 Sep 2021, 18:20
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 2.1
v3 : 3.3 |
| References | (MISC) https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:adobe:xmp_toolkit_sdk:*:*:*:*:*:*:*:* |
01 Sep 2021, 15:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-01 15:15
Updated : 2024-02-16 19:18
NVD link : CVE-2021-36057
Mitre link : CVE-2021-36057
CVE.ORG link : CVE-2021-36057
JSON object : View
Products Affected
adobe
- xmp_toolkit_software_development_kit
debian
- debian_linux
CWE
CWE-123
Write-what-where Condition