xs:xst: Heap-buffer-overflow in fxGetNextEntity

Detailed Report: https://oss-fuzz.com/testcase?key=5872899101163520 Project: xs Fuzzing Engine: libFuzzer Fuzz Target: xst Job Type: libfuzzerasanxs Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x631000010808 Crash State: fxGetNextEntity fxGetNextTokenJSXChild...

CVE-2021-28548

Adobe Photoshop versions 21.2.6 and earlier and 22.3 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user...