CVE-2020-9617: 
Adobe Premiere Rush vulnerability analysis and mitigation

Adobe Premiere Rush versions 1.5.8 and earlier were found to contain an out-of-bounds read vulnerability, identified as CVE-2020-9617. The vulnerability was disclosed and patched by Adobe on May 19, 2020. This security flaw affects the Adobe Premiere Rush video editing software across all supported platforms (Adobe Bulletin, NVD).

The vulnerability is classified as an out-of-bounds read issue (CWE-125). According to the National Vulnerability Database, it received a CVSS v3.1 base score of 5.5 (Medium), with a vector string of CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N. The CVSS v2.0 base score is 4.3 (Medium) with a vector string of (AV:N/AC:M/Au:N/C:P/I:N/A:N) (NVD).

Successful exploitation of this vulnerability could lead to information disclosure. The vulnerability requires user interaction and can potentially expose sensitive information to unauthorized actors (Adobe Bulletin, Threatpost).

The vulnerability requires local access and user interaction to be exploited. No known exploits in the wild have been reported at the time of disclosure (NVD).

Adobe addressed this vulnerability by releasing security updates for affected versions of Premiere Rush. Users are advised to update their software to versions newer than 1.5.8 to mitigate this security risk (Adobe Bulletin).