Lucene search

K
osvGoogleOSV:CVE-2021-36055
HistorySep 01, 2021 - 3:15 p.m.

CVE-2021-36055

2021-09-0115:15:10
Google
osv.dev
9
xmp toolkit sdk
use-after-free
arbitrary code execution
user interaction
malicious file

AI Score

7.1

Confidence

High

EPSS

0.006

Percentile

79.1%

XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

AI Score

7.1

Confidence

High

EPSS

0.006

Percentile

79.1%