CVE-2021-39847 in Adobe and Debian Products
Published on September 1, 2021

XMP Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.

NVD

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2021-39847 has been classified to as a Stack Overflow vulnerability or weakness.

Products Associated with CVE-2021-39847

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-39847 are published in these products:

Adobe Xmp Toolkit Software Development Kit

Debian Linux

Affected Versions

Adobe XMP Toolkit:

Version unspecified, <= 2020.1 is affected.
Version unspecified, <= None is affected.

Exploit Probability

EPSS

0.31%

Percentile

54.10%