CVE-2021-36046 in Adobe and Debian Products
Published on September 1, 2021

XMP Toolkit SDK TIFF_MemoryReader::SortIFD function Memory Corruption

XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

NVD

Weakness Type

Access of Memory Location After End of Buffer

The software reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer. This typically occurs when a pointer or its index is decremented to a position before the buffer; when pointer arithmetic results in a position before the buffer; or when a negative index is used, which generates a position before the buffer.

Products Associated with CVE-2021-36046

stack.watch emails you whenever new vulnerabilities are published in Adobe Xmp Toolkit Software Development Kit or Debian Linux. Just hit a watch button to start following.

Adobe Xmp Toolkit Software Development Kit

  Watch

Debian Linux

  Watch

Affected Versions

• Version unspecified, <= 2020.1 is affected.
• Version unspecified, <= None is affected.

Exploit Probability