Out-of-bounds Read

2022-05-1211:22:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xmp toolkit sdk

2020.1

out-of-bounds read

vulnerability

disclosure of arbitrary memory

aslr

exploitation

user interaction

malicious file

software

EPSS

0.002

Percentile

59.9%

JSON

XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.