CVE-2021-36057

Published: Sep 1, 2021Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 1.8 / Impact: 1.4

Source: NVD (Secondary)

Description

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.

Affected (2)

Products: Adobe: Xmp Toolkit Software Development Kit · Debian: Debian Linux

1 product

Xmp Toolkit Software Development Kit

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Xmp Toolkit Software Development Kit	Up to 2020.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Related CWEs

Write-what-where Condition

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

References (5)

https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html

Source: psirt@adobe.com

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html

Source: psirt@adobe.com

Mailing List

https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.debian.org/debian-lts-announce/2025/08/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.