CVE-2021-43749: 
Adobe Premiere Rush vulnerability analysis and mitigation

Adobe Premiere Rush versions 1.5.16 and earlier were affected by a Null pointer dereference vulnerability identified as CVE-2021-43749. The vulnerability was disclosed on December 20, 2021, and required user interaction through opening a malicious file to be exploited (NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476). According to the CVSS 3.1 scoring system, it received a base score of 5.5 (MEDIUM) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. Under CVSS 2.0, it scored 4.3 (MEDIUM) with the vector (AV:N/AC:M/Au:N/C:N/I:N/A:P) (NVD).

When successfully exploited, this vulnerability could lead to an application denial-of-service condition in the context of the current user (NVD).

The vulnerability requires user interaction for successful exploitation, specifically requiring a victim to open a malicious file. The attack complexity is considered low, and no authentication is required, though local access is necessary (NVD).

Adobe has addressed this vulnerability in versions after 1.5.16 of Premiere Rush. Users are advised to update to the latest version of the software (NVD).

The vulnerability was discovered and reported by HY350 of Topsec Alpha Team (Adobe Security).