CVE-2021-36064

EUVD-2021-22697
XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Buffer Underflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
adobeCNA
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
adobexmp_toolkit_software_development_kit
𝑥
≤ 2020.1
debiandebian_linux
10.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
exempi
bookworm
2.6.3-1
fixed
bullseye
no-dsa
sid
2.6.5-1
fixed
trixie
2.6.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
exempi
bionic
Fixed 2.4.5-2ubuntu0.1
released
focal
Fixed 2.5.1-1ubuntu0.1
released
impish
Fixed 2.5.2-1ubuntu0.21.10.1
released
jammy
Fixed 2.5.2-1ubuntu0.22.04.1
released
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
xenial
needed