
Cloud Vulnerability DB
A community-led vulnerabilities database
XMP Toolkit version 2020.1 and earlier contains a Buffer Underflow vulnerability identified as CVE-2021-36064. The vulnerability was discovered and assigned on June 30, 2021, affecting Adobe's XMP Core software. This security flaw requires user interaction, specifically opening a malicious file, to be exploited (CVE Mitre, Adobe Security).
The vulnerability is classified as a Buffer Underflow issue that could potentially lead to arbitrary code execution in the context of the current user. The exploitation path requires user interaction through the opening of a specially crafted malicious file (CVE Mitre).
If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The impact is significant as it could allow attackers to execute malicious code on the affected system, potentially compromising the security of the affected application (Debian LTS).
The vulnerability has been addressed in subsequent releases after version 2020.1. Various Linux distributions have also released security updates to address this vulnerability. For instance, Debian 10 (Buster) users can upgrade to version 2.5.0-2+deb10u1 of the exempi package (Debian LTS).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."