CVE-2021-40774: 
NixOS vulnerability analysis and mitigation

Adobe Prelude version 10.1 and earlier versions are affected by a null pointer dereference vulnerability (CVE-2021-40774). The vulnerability was discovered by HY350 of Topsec Alpha Team and disclosed on November 22, 2021. This security flaw affects Adobe Prelude software running on Microsoft Windows systems (NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) that occurs when parsing specially crafted files. The severity of this vulnerability has been assessed with a CVSS v3.1 Base Score of 5.5 (Medium), with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. Under CVSS v2.0, it received a Base Score of 4.3 (Medium) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P) (NVD).

When successfully exploited, this vulnerability can lead to an application denial-of-service condition in the context of the current user. The impact is limited to service availability, with no direct effect on confidentiality or integrity of the system (NVD).

Exploitation of this vulnerability requires user interaction, specifically the victim must open a malicious file. The attack complexity is considered low, requiring no privileges, but does need user interaction to succeed (NVD).

Adobe has released patches to address this vulnerability through their security advisory. Users are advised to update to the latest version of Adobe Prelude to mitigate this security issue (Adobe Advisory).