VDB
CVE-2021-36057
CVE-2021-36057
PUBLISHED
CVSS 4 MEDIUM
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.
EPSS 0.04% · 13.9th percentile
Risk Scores
CVSS v3.0
4
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.04%
13.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| debian | debian_linux | 10.0 |
| adobe | xmp_toolkit_software_development_kit | 0 |
| Adobe | XMP Toolkit | unspecified, * |
Timeline
- Sep 1, 2021 CVE Published
- Sep 2, 2021 EPSS Score
- Sep 9, 2021 EPSS Score
- Oct 30, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 23, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 21, 2022 EPSS Score
- Jun 18, 2022 EPSS Score
- Oct 13, 2022 EPSS Score
- Dec 10, 2022 EPSS Score