CVE-2021-43030
Last modified
CVE-2021-43030 is a low-severity vulnerability rated 3.3/10 on the CVSS scale. Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. EPSS estimates a 1.31% chance of exploitation in the next 30 days.
Description
Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Premiere Rush | <= 1.5.16 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-43030?
How severe is CVE-2021-43030?
How do I fix CVE-2021-43030?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-43025Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
- CVE-2021-43026Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
- CVE-2021-43027Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (…7.8
- CVE-2021-43028Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
- CVE-2021-43029Adobe Premiere Rush version 1.5.16 (and earlier) is affected…7.8
- CVE-2021-4303A vulnerability, which was classified as problematic, has be…6.1
- CVE-2021-43032In XenForo through 2.2.7, a threat actor with access to the …4.8
- CVE-2021-43033An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
- CVE-2021-43034An issue was discovered in Kaseya Unitrends Backup Appliance…7.8
- CVE-2021-43035An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
- CVE-2021-43036An issue was discovered in Kaseya Unitrends Backup Appliance…9.8
- CVE-2021-43037An issue was discovered in Kaseya Unitrends Backup Appliance…7.8
Are you affected by CVE-2021-43030?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
