CVE-2021-42720

CVE-2021-42720 affects Adobe Bridge 11.1.1 and earlier, due to an out-of-bounds read when parsing a crafted file, potentially allowing arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Affected product is Adobe Bridge; root cause is...

CVE-2021-42720 Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42720

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42730

Adobe Bridge 11.1.1 and earlier is affected by a memory corruption vulnerability caused by insecure handling of a malicious PSD file, potentially enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a crafted file). A patch is available: update ...

CVE-2021-42730 Adobe Bridge Memory Corruption could lead to Arbitrary code execution

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42719 Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42719

Adobe Bridge 11.x (11.1.1 and earlier) is affected by an out-of-bounds read while parsing a crafted .jpe file, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). This vulnerability is docume...

CVE-2021-42719

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42719 Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-42533

Product/impact summary: Adobe Bridge (versions 11.1.1 and earlier) is affected by a double‑free vulnerability in the DCM file parsing path, which could lead to arbitrary code execution in the context of the current user. Root cause: a double‑free condition during crafted DCM parsing. Impact: pote...

CVE-2021-42533

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

CVE-2021-42533 Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

CVE-2021-42533 Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

Adobe Bridge version 11.1.1 and earlier is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit...

CVE-2021-40750 Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service

Adobe Bridge version 11.1.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

CVE-2021-40750

Adobe Bridge 11.1.1 and earlier is affected by a null pointer dereference when parsing a crafted file. The issue allows a local attacker to cause an application denial-of-service in the context of the current user, and exploitation requires user interaction (victim opens a malicious file). Multip...

CVE-2021-40750 Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service

Adobe Bridge version 11.1.1 and earlier is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this...

Missing allowlist checks on tokens in CrossAnchorBridge could cause loss of funds

Lines of code Vulnerability details Impact The CrossAnchorBridge contract accepts any ERC20 token and transfers them to the wormhole bridge. There were allowlist checks on the tokens before, but they were commented out in this version for the audit. If a user transfers, for example, non-supported...

Centralisation Risk: TokenManager Gives Unnecessary Permissions to The Default Admin Through changeDepositBoxAddress() Which May Cause The Bridge to Get Stuck

Lines of code Vulnerability details Impact The function changeDepositBoxAddress allows the DEFAULTADMINROLE to change the depositBox associated with a TokenManager. If the newDepositBox is incorrectly set either accidentally or maliciously it will cause the bridge to become stuck. For example if ...

Deposit Box Does Not Account for Fee On Transfer Tokens Causing the Bridge To Absorb the Fees

Lines of code Vulnerability details Impact The function DepositBoxERC20.depositERC20 does not account for FoT Fee on Transfer tokens. FoT tokens charge a fee when transfer or transferFrom is called and it is subtracted from amount so the receiving address will receive less than amount of tokens...

WordPress WHMCS Bridge plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress WHMCS Bridge plugin prior to 6.4b, which ste...