CVE-2021-36049: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 11.1 and earlier versions are affected by a memory corruption vulnerability (CVE-2021-36049) that was discovered and disclosed on September 1, 2021. The vulnerability affects Adobe Bridge software and was identified by CQY of Topsec Alpha Team (yjdfy) (Adobe Security Bulletin).

The vulnerability is caused by insecure handling of a malicious Bridge file, which can lead to memory corruption. It has been classified as an Out-of-bounds Write (CWE-787) and Access of Memory Location After End of Buffer vulnerability. The CVSS v3.1 base score is 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access with user interaction required (NVD).

If successfully exploited, this vulnerability could potentially result in arbitrary code execution in the context of the current user. The high CVSS score indicates significant potential impact on confidentiality, integrity, and availability of the system (NVD).

Adobe has released patches to address this vulnerability. Users are advised to update to the latest version of Adobe Bridge through the official Adobe update channels (Adobe Security Bulletin).