CVE-2021-36055 XMP Toolkit SDK Use After Free Vulnerability In ReadingXMPNewDOM Could Lead To Arbitrary Code Execution

XMP Toolkit SDK versions 2020.1 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-36055

CVE-2021-36055 affects Exempi (XMP Toolkit SDK) up to version 2020.1 and earlier, with a use-after-free that could allow arbitrary code execution under the current user when a victim opens a crafted file. Several advisories document the issue across distros and provide patches: Debian bullseye 2....

CVE-2021-36055

XMP Toolkit SDK versions 2020.1 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-36052

The CVE-2021-36052 issue concerns Exempi (XMP Toolkit) and affects version 2020.1 and earlier, with an out-of-bounds memory access that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (e.g., opening a crafted file). Multiple connecte...

CVE-2021-36052

XMP Toolkit version 2020.1 and earlier is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-36052 XMPToolkit SDK ImportTIFF_CheckStandardMapping Memory Corruption

XMP Toolkit version 2020.1 and earlier is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-36052

XMP Toolkit version 2020.1 and earlier is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-36053

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2021-36053 XMP Toolkit SDK Out-of-bounds Read Vulnerability In FindAndReadXMPChunk Could Lead To Information Exposure

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2021-36053

CVE-2021-36053 affects Exempi (XMP Toolkit SDK) versions through 2020.1 and earlier, due to an out-of-bounds read that could disclose arbitrary memory. Exploitation requires user interaction (victim opens a malicious file), potentially bypassing ASLR. Connected advisories (Debian LTS, Mageia, Ubu...

CVE-2021-36053

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2021-36050

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36050 XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36050

CVE-2021-36050 affects Exempi (XMP Toolkit SDK) 2020.1 and earlier, with a heap-based buffer overflow that can lead to arbitrary code execution under the current user when a crafted file is opened (user interaction required). Debian LTS advisories show fixes: 2.5.0-2+deb10u1 for Debian 10 (buster...

CVE-2021-36050

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36048

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36048 XMP Toolkit SDK Improper Input Validation Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36048

CVE-2021-36048 affects XMP Toolkit SDK 2020.1 and earlier and is due to Improper Input Validation, potentially leading to arbitrary code execution in the context of the current user. Exploitation requires the victim to open a crafted file (user interaction). Public references in connected documen...

CVE-2021-36048

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36047

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...