Skip to content
OpenAdvisories
High · 7.8 CVE-2021-43022 EUVD-2021-29976GHSA-cjcx-2c8q-4c5x

Adobe Premiere Rush PNG File Memory Corruption Remote Code Execution

Published Dec 20, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
Adobe Premiere Rush unspecified – ≤ 1.5.16, unspecified – ≤ None —

References