Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35514
HistoryMay 13, 2022 - 9:28 a.m.

Out-of-bounds Read

2022-05-1309:28:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
xmp toolkit sdk
out-of-bounds read
vulnerability
sensitive memory
aslr bypass
user interaction
malicious file

EPSS

0.002

Percentile

60.4%

XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.