CVE-2021-46816

Description

Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.736

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2021-40710,CVE-2021-40715,CVE-2021-42723,CVE-2021-46816 are fixed in Adobe Premiere Pro 15.4.1Windows
Vulnerabilities CVE-2021-46816 are fixed in Adobe Premiere Rush for Mac 15.4.1Mac

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234