CVE-2020-9655: 
Adobe Premiere Rush vulnerability analysis and mitigation

Adobe Premiere Rush versions 1.5.12 and earlier were found to contain an out-of-bounds read vulnerability identified as CVE-2020-9655. The vulnerability was discovered on March 2, 2020, and publicly disclosed on June 18, 2020. This security flaw specifically affects the processing of 3GP files in Adobe Premiere Rush (ZDI Advisory, CVE Details).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs during the processing of 3GP files. The flaw stems from inadequate validation of user-supplied data, which can result in a read operation past the end of an allocated structure. The vulnerability has received a CVSS v3.1 base score of 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory, NVD).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process. The high severity rating indicates potential significant impact on the confidentiality, integrity, and availability of the affected system (ZDI Advisory).

The vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. As of the disclosure, there were no known exploits of this vulnerability in the wild (ZDI Advisory).

Adobe has released version 1.5.16 of Premiere Rush to address this vulnerability. Users of affected versions (1.5.12 and earlier) are strongly encouraged to update to the latest version (Threatpost, Adobe Advisory).