CVE-2021-36054: 
Linux Debian vulnerability analysis and mitigation

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability (CVE-2021-36054). The vulnerability was discovered in Exempi, which is an implementation of XMP (Extensible Metadata Platform) (Debian LTS, Ubuntu Notice).

The vulnerability is classified as a buffer overflow issue that could potentially result in local application denial of service. The issue affects the XMP Toolkit SDK's handling of media files and could be triggered when processing specially crafted files (Debian LTS).

If successfully exploited, this vulnerability could lead to denial of service conditions in the context of the current user. The primary impact is the potential disruption of application functionality through local application denial of service (Debian LTS, Ubuntu Notice).

The vulnerability has been fixed in various distributions. Ubuntu has released security updates across multiple versions including Ubuntu 22.04 LTS, 21.10, 20.04, and 18.04. Debian has also addressed this issue in version 2.5.0-2+deb10u1 for Debian 10 buster. Users are recommended to upgrade their exempi packages to the latest available versions (Ubuntu Notice, Debian LTS).