Skip to content
OpenAdvisories
High · 7.8 CVE-2021-42533 EUVD-2021-29502GHSA-r2vp-qcg8-m2f6

Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

Published Mar 16, 2022 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.

Affected products

VendorProductAffectedFixed
Adobe Bridge unspecified – ≤ 11.1.1, unspecified – ≤ None —

References