CVE-2021-36053

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2021-36055

XMP Toolkit SDK versions 2020.1 and earlier are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-36057

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

CVE-2021-36056

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

Design/Logic Flaw

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

CVE-2021-36058

XMP Toolkit SDK version 2020.1 and earlier is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36048

XMP Toolkit SDK version 2020.1 and earlier is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

UBUNTU-CVE-2021-36058

XMP Toolkit SDK version 2020.1 and earlier is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-39847

XMP Toolkit SDK version 2020.1 and earlier is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-39847

CVE-2021-39847 affects the XMP Toolkit SDK (Exempi) versions 2020.1 and earlier. The issue is a stack-based buffer overflow in Exempi, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a crafted file. Con...

CVE-2021-36058 XMP Toolkit SDK Integer Overflow Vulnerability Could Result In Application Denial Of Service

XMP Toolkit SDK version 2020.1 and earlier is affected by an Integer Overflow vulnerability potentially resulting in application-level denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36058

CVE-2021-36058 affects the XMP Toolkit SDK (Exempi) up to version 2020.1 and earlier. The underlying issue is an Integer Overflow in Exempi, which can lead to an application-level denial of service in the context of the current user when a victim opens a crafted file. Exploitation requires user i...

CVE-2021-36056 XMP Toolkit SDK Heap-based Buffer Overflow Could Lead To Arbitrary Code Execution

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36056

CVE-2021-36056 affects XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a heap-based buffer overflow in the Exempi XMP implementation that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a crafted file (user interaction). S...

CVE-2021-36056

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36054 XMP Toolkit SDK Heap-based Buffer Overflow in the PSD_MetaHandler::CacheFileData Could Lead To Application Denial Of Service

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36054

Exempi (XMP Toolkit SDK) v2020.1 and earlier is affected by CVE-2021-36054, a heap-based buffer overflow vulnerability in the XMP toolkit. Exploitation requires the user to open a crafted file, potentially causing a local denial of service (and, per related advisories, may enable arbitrary code e...

CVE-2021-36054

XMP Toolkit SDK version 2020.1 and earlier is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file...

CVE-2021-36057 XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service

XMP Toolkit SDK version 2020.1 and earlier is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of th...

CVE-2021-36057

CVE-2021-36057 affects the XMP Toolkit SDK 2020.1 and earlier. The vulnerability is a write-what-where condition during the application’s memory allocation, which can cause mismatches in memory management and lead to local denial of service in the context of the current user. The issue is confirm...