Wiz
Vulnerability DatabaseCVE-2021-43748

CVE-2021-43748: 
Adobe Premiere Rush vulnerability analysis and mitigation

Overview

Adobe Premiere Rush versions 1.5.16 and earlier were affected by a Null pointer dereference vulnerability identified as CVE-2021-43748. The vulnerability was disclosed in December 2021 and affected Adobe's video editing software Premiere Rush (NVD, Adobe Security).

Technical details

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) that could lead to application denial-of-service. The severity of the vulnerability was rated as Important by Adobe (Adobe Security). According to the CVSS scoring system, it received a CVSS 2.0 score of 9.3 and a CVSS 3.0 score of 7.7, indicating a high severity level (ManageEngine).

Impact

The primary impact of this vulnerability is application denial-of-service, which could affect the availability of Adobe Premiere Rush for users (Adobe Security).

Mitigation and workarounds

Adobe addressed this vulnerability in their security update. Users were advised to update their Adobe Premiere Rush installations to versions newer than 1.5.16 (Adobe Security).

Community reactions

The vulnerability was discovered and reported by researchers from the Topsec Alpha Team (Adobe Security).

Additional resources

Source: This report was generated using AI

Related Adobe Premiere Rush vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2023-22244HIGH7.8
  • Adobe Premiere RushAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 17, 2023
CVE-2023-22234HIGH7.8
  • Adobe Premiere RushAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 17, 2023
CVE-2022-23204MEDIUM5.5
  • Adobe Premiere RushAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoFeb 16, 2022
CVE-2021-43750MEDIUM5.5
  • Adobe Premiere RushAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoDec 20, 2021
CVE-2021-43749MEDIUM5.5
  • Adobe Premiere RushAdobe Premiere Rush
  • cpe:2.3:a:adobe:premiere_rush
NoNoDec 20, 2021

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo