CVE-2021-43750: 
Adobe Premiere Rush vulnerability analysis and mitigation

Adobe Premiere Rush versions 1.5.16 and earlier were affected by a Null pointer dereference vulnerability identified as CVE-2021-43750. The vulnerability was discovered and disclosed in December 2021, affecting Adobe's video editing software Premiere Rush. This security flaw requires user interaction, specifically opening a malicious file, to be exploited (NVD).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476). According to the CVSS 3.1 scoring system, it received a base score of 5.5 (Medium severity) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability requires local access and user interaction but needs no privileges to exploit (NVD).

If successfully exploited, this vulnerability could lead to an application denial-of-service in the context of the current user. The impact is primarily focused on the availability of the application, with no direct effect on confidentiality or integrity (NVD).

The vulnerability requires user interaction for successful exploitation, specifically requiring a victim to open a malicious file. The attack complexity is considered low, but local access is necessary for exploitation (NVD).

Adobe has addressed this vulnerability in versions after 1.5.16 of Premiere Rush. Users are advised to update to the latest version of the software to mitigate this security risk (NVD).

The vulnerability was discovered by HY350 of Topsec Alpha Team, demonstrating active security research in Adobe products (Adobe Security).