CVE-2021-36077CWE-788

Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service

Medium · published September 1, 2021

CVSS v3.1
5.5
EPSS
2%
Percentile
82.9
In the wild
Unconfirmed
What it is

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02274 · 82.9th percentile
Weakness
CWE-788 · Access of Memory Location After End of Buffer
Published
2021-09-01T14:35Z
EPSS history
Timeline
  • 01 SEP 14:35Z
    Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service
    cvelistv5