CVE-2021-43746— Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-43746
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用未经初始化的指针
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Premiere Rush 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Premiere Rush是美国奥多比（Adobe）公司的一套跨平台的视频编辑软件。 Adobe Premiere Rush 存在缓冲区错误漏洞，攻击者可利用该漏洞进行任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Adobe | Premiere Rush | unspecified ~ 1.5.16 | - |
II. Public POCs for CVE-2021-43746
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-43746
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2021-12-20 · 25 CVEs total
| CVE-2021-43028 | 7.8 HIGH | Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution |
| CVE-2021-43029 | 7.8 HIGH | Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution |
| CVE-2021-43021 | 7.8 HIGH | Adobe Premiere Rush EXR File Memory Corruption Remote Code Execution |
| CVE-2021-43022 | 7.8 HIGH | Adobe Premiere Rush PNG File Memory Corruption Remote Code Execution |
| CVE-2021-43747 | 7.8 HIGH | Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution |
| CVE-2021-43024 | 7.8 HIGH | Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution |
| CVE-2021-43026 | 7.8 HIGH | Adobe Premiere Rush MXF File Memory Corruption Remote Code Execution |
| CVE-2021-43750 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-43748 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-43749 | 5.5 MEDIUM | Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service |
| CVE-2021-44697 | 3.3 LOW | Adobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-44699 | 3.3 LOW | Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-44698 | 3.3 LOW | Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2021-44181 | Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2021-43025 | Adobe Premiere Rush SVG File Memory Corruption Remote Code Execution | |
| CVE-2021-44180 | Adobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2021-44183 | Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | |
| CVE-2021-44182 | Adobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | |
| CVE-2021-43763 | Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability | |
| CVE-2021-44179 | Adobe Dimension GIF File Parsing Memory Corruption Remote Code Execution Vulnerability |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Premiere Rush
- CVE-2023-22244
Adobe Premiere Rush PSD files Use After Free Arbitrary code - CVE-2023-22234
Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arb - CVE-2022-23204
Adobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Inf - CVE-2021-43750
Adobe Premiere Rush NULL Pointer Dereference Local Denial-of - CVE-2021-43030
Adobe Premiere Rush MP4 File Parsing Uninitialized Variable
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
Same weakness: CWE-824
V. Comments for CVE-2021-43746
No comments yet