CVE-2021-36057
XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service
- State
- Published
- Severity
- 4.0 Medium
- Published
- Sep 1, 2021
- Updated
- Nov 3, 2025
- Reserved
- Jun 30, 2021
Description
XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.0 Medium | CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | adobe |
Weaknesses
- CWE-123 Write-what-where Condition (CWE-123)
Affected Products
| Product | Versions |
|---|---|
XMP ToolkitAdobe |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.