CVE-2021-40701

Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@adobe.com

Published

2021-09-27

Last modified

2024-09-17

Weaknesses

CWE-119, CWE-788

Affected products

• Premiere (Adobe)
• Premiere Elements (Adobe)

References

• https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.html