VDB

DEBIAN-CVE-2021-42528

DEBIAN-CVE-2021-42528 PUBLISHED CVSS 5.5 MEDIUM

XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:12exempi0, 0, 0
Debian:14exempi0, 0, 0
Debian:13exempi0, 0, 0
Debian:11exempi2.5.2-1, 0, 2.5.2-1

Timeline

  • May 2, 2022 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›