Adobe Premiere Pro

Premiere Pro 25.1 Heap Overflow (CVE-2025-27196) – Arbitrary Code Exec
CVE-2025-27196 7.8 - High - April 08, 2025

Premiere Pro versions 25.1, 24.6.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Heap-based Buffer Overflow

Adobe Premiere Pro Heap-based Buffer Overflow Vulnerability
CVE-2024-53956 7.8 - High - December 10, 2024

Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Premiere Pro <24.5, 23.6.8 OOB Write allows arbitrary exec
CVE-2024-39384 7.8 - High - September 13, 2024

Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Premiere Pro 24.5/23.6.8 UA free memory exposure & ASLR bypass
CVE-2024-39385 5.5 - Medium - September 13, 2024

Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

OS PATH Leak in Adobe Premiere Pro <=24.4.1 RCE
CVE-2024-34123 7 - High - July 09, 2024

Premiere Pro versions 23.6.5, 24.4.1 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious file into the search path, which the application might execute instead of the legitimate file. This could occur when the application uses a search path to locate executables or libraries. Exploitation of this issue requires user interaction, attack complexity is high.

Untrusted Path

Adobe Premiere Pro OOB Write CVE-2024-20746 (before 24.1)
CVE-2024-20746 7.8 - High - March 18, 2024

Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Premiere Pro 24.1 Heap Buffer Overflow Arbitrary Code Execution
CVE-2024-20745 7.8 - High - March 18, 2024

Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Heap BOverflow in Premiere Pro 24.0/23.6 (CVE-2023-47056)
CVE-2023-47056 - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Premiere Pro <24.0 & <23.6: UAF Vulnerability
CVE-2023-47055 - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

OOBW in Adobe Premiere Pro 24.0/23.6: RCE via Malicious File
CVE-2023-47057 - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Memory Corruption

Adobe Premiere Pro 24.0/23.6 OOB Read in File Parser Execute via Malicious File
CVE-2023-47058 7.8 - High - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Premiere Pro OOB Read in File Parser (v24.0) Enables Code Exec
CVE-2023-47059 - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Premiere Pro <=24.0 Uninitialized Pointer Access Vulnerability
CVE-2023-47060 - November 16, 2023

Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Adobe Premiere Pro <22.0/15.4.2 OOBR read bypassing ASLR
CVE-2021-43751 3.3 - Low - September 07, 2023

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Premiere Pro 22.0 Out-of-Bounds Read CVE-2021-40795
CVE-2021-40795 7.8 - High - September 07, 2023

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Premiere Pro <=22.0 OOB read disclosure
CVE-2021-40791 5.5 - Medium - September 07, 2023

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Out-of-bounds Read

Adobe Premiere Pro UAF (22.0/15.4.2) Enables ASLR Bypass
CVE-2021-40790 5.5 - Medium - September 07, 2023

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Dangling pointer

Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability
CVE-2020-9616 - June 26, 2020

Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability
CVE-2020-9652 - June 25, 2020

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability
CVE-2020-9653 - June 25, 2020

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability
CVE-2020-9654 - June 25, 2020

Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability
CVE-2019-7931 - August 14, 2019

Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.