CVEvulnerability

CVE-2021-36057

3.3 LOW Published 2021-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS 3.0 ([email protected])
4.0 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-123

Description

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.

Affected configurations

• adobe xmp toolkit software development kit (<= 2020.1) • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-123 Write-what-where Condition weakness

References