Description
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.
References (3)
Core 3
Core References
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
Patch, Vendor Advisory
https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
Scores
CVSS v3
3.3
EPSS
0.0065
EPSS Percentile
46.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-123
Status
published
Products (2)
adobe/xmp_toolkit_software_development_kit
< 2020.1
debian/debian_linux
10.0
Published
Sep 01, 2021
Tracked Since
Feb 18, 2026