CVE-2021-43746

MEDIUM Year: 2021
CVSS v3 Score
5.5
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-824
View all →

Vulnerability Description

Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of MP4 files. The issue results from the lack of proper initialization of memory prior to accessing it.

Related Vulnerabilities

CVE-2018-5860

MEDIUM
CVSS:5.5(Medium)

In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used without being initialized correctly.

CWE-8242018

CVE-2019-5693

MEDIUM
CVSS:5.5(Medium)

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) in which the program accesses or uses a pointer that has not been initialized, which m...

CWE-8242019

CVE-2020-1874

MEDIUM
CVSS:5.5(Medium)

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when...

CWE-8242020

CVE-2020-1875

MEDIUM
CVSS:5.5(Medium)

NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer whe...

CWE-8242020

CVE-2021-41204

MEDIUM
CVSS:5.5(Medium)

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This resul...

CWE-8242021

CVE-2021-47602

MEDIUM
CVSS:5.5(Medium)

In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data fram...

CWE-8242021