Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-40750— Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service

CVSS 5.5 · Medium EPSS 0.61% · P70
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-40750

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Bridge version 11.1.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
空指针解引用
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Bridge 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Bridge是美国奥多比（Adobe）公司的一款文件查看器。 Adobe Bridge存在代码问题漏洞，该漏洞可导致内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AdobeBridge unspecified ~ 11.1.1 -

II. Public POCs for CVE-2021-40750

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-40750

请登录查看更多情报信息。

Same Patch Batch · Adobe · 2022-03-16 · 45 CVEs total

CVE-2021-407877.8 HIGHAdobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary c
CVE-2021-407637.8 HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code execution
CVE-2021-427307.8 HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code execution
CVE-2021-407797.8 HIGHAdobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code
CVE-2021-407807.8 HIGHAdobe Media Encoder MXF file memory corruption vulnerability could lead to arbitrary code
CVE-2021-407387.8 HIGHAdobe Audition WAV file Memory corruption could lead to Arbitrary code execution
CVE-2021-407647.8 HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code execution
CVE-2021-427207.8 HIGHAdobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution
CVE-2021-427297.8 HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code execution
CVE-2021-427227.8 HIGHAdobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution
CVE-2021-427247.8 HIGHAdobe Bridge Memory Corruption could lead to Arbitrary code execution
CVE-2021-407867.8 HIGHAdobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary c
CVE-2021-425277.8 HIGHAdobe Premiere Elements PSD file memory corruption vulnerability could lead to arbitrary c
CVE-2021-425267.8 HIGHAdobe Premiere Elements WAV file memory corruption vulnerability could lead to arbitrary c
CVE-2021-407407.8 HIGHAdobe Audition Memory Corruption could lead to Arbitrary code execution
CVE-2021-407947.8 HIGHAdobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code e
CVE-2021-407657.8 HIGHAdobe Character Animator Memory Corruption could lead to Arbitrary code execution
CVE-2021-407937.8 HIGHAdobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code e
CVE-2021-427287.8 HIGHAdobe Bridge Buffer Overflow Arbitrary code execution
CVE-2021-407397.8 HIGHAdobe Audition Memory Corruption could lead to Arbitrary code execution

Showing top 20 of 45 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Bridge
Same vendor: Adobe
Same weakness: CWE-476

V. Comments for CVE-2021-40750

No comments yet

Leave a comment