CVE-2021-36079: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge version 11.1 and earlier versions were found to contain an out-of-bounds read vulnerability when parsing crafted .SGI files. The vulnerability, identified as CVE-2021-36079, was disclosed on September 1, 2021. This security flaw affects Adobe Bridge software running on Microsoft Windows systems (NVD).

The vulnerability is classified as an out-of-bounds read (CWE-125) that occurs during the parsing of .SGI files. When exploited, it could result in reading past the end of an allocated memory structure. The vulnerability has received a CVSS v3.1 Base Score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, and a CVSS v2.0 Base Score of 9.3 (HIGH) with the vector string (AV:N/AC:M/Au:N/C:C/I:C/A:C) (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute code in the context of the current user. The vulnerability affects confidentiality, integrity, and availability of the system, with potential for complete compromise of system security (NVD).

Adobe has released patches to address this vulnerability through their security advisory APSB21-69. Users are advised to update to the latest version of Adobe Bridge to mitigate this security risk (Adobe Security).