Adobe Premiere Rush up to 1.5.16 MP4 File uninitialized pointer

Summaryinfo

A vulnerability has been found in Adobe Premiere Rush up to 1.5.16 and classified as problematic. Impacted is an unknown function of the component MP4 File Handler. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2021-43030. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Adobe Premiere Rush up to 1.5.16. It has been rated as problematic. This issue affects an unknown part of the component MP4 File Handler. The manipulation with an unknown input leads to a uninitialized pointer vulnerability. Using CWE to declare the problem leads to CWE-824. The product accesses or uses a pointer that has not been initialized. Impacted is confidentiality.

The weakness was published 12/21/2021 as apsb21-10. The advisory is shared at helpx.adobe.com. The identification of this vulnerability is CVE-2021-43030 since 10/25/2021. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

Upgrading eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Adobe

Name

• Premiere Rush

Version

• 1.5.0
• 1.5.1
• 1.5.2
• 1.5.3
• 1.5.4
• 1.5.5
• 1.5.6
• 1.5.7
• 1.5.8
• 1.5.9
• 1.5.10
• 1.5.11
• 1.5.12
• 1.5.13
• 1.5.14
• 1.5.15
• 1.5.16

License

• free

Website

• Vendor: https://www.adobe.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion