CVE-2020-9657
Adobe Premiere Rush vulnerability analysis and mitigation

Overview

Adobe Premiere Rush versions 1.5.12 and earlier were found to contain an out-of-bounds write vulnerability identified as CVE-2020-9657. The vulnerability was disclosed on June 16, 2020, and affected Adobe's video editing application targeted toward YouTubers and social media creators (Adobe Security, Threatpost).

Technical details

The vulnerability is classified as critical and involves an out-of-bounds write condition that could potentially lead to arbitrary code execution. The CVSS 3.0 score for this vulnerability is 7.7, indicating a high severity level (Vulnerability Database).

Impact

Successful exploitation of this vulnerability could lead to arbitrary code execution on affected systems (CVE Mitre).

Exploitability

At the time of disclosure, Adobe stated that there were no known exploits of this vulnerability in the wild (Threatpost).

Mitigation and workarounds

Adobe addressed this vulnerability in version 1.5.16 of Premiere Rush. Users of affected versions (1.5.12 and earlier) are urged to update to the patched version (Threatpost).

Additional resources


SourceThis report was generated using AI

Related Adobe Premiere Rush vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2023-22244HIGH7.8
  • Adobe Premiere Rush logoAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 17, 2023
CVE-2023-22234HIGH7.8
  • Adobe Premiere Rush logoAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 17, 2023
CVE-2022-23204MEDIUM5.5
  • Adobe Premiere Rush logoAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 16, 2022
CVE-2021-43750MEDIUM5.5
  • Adobe Premiere Rush logoAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoDec 20, 2021
CVE-2021-43749MEDIUM5.5
  • Adobe Premiere Rush logoAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoDec 20, 2021

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management