CVE-2021-44186

Adobe Bridge SGI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.

Affected

Adobe · Bridge

CVSS v3.1 NVD

3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v3.0 ADOBE

3.3 LOWCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

2.02% chance of exploitation in the next 30 days, 81st percentile

Published

2021-12-07

Updated

2025-04-23

Proof-of-concept exploits (1)

• 0xhaggis/CVE-2021-4418621★ · 2023-10-18

Security advisories

• https://helpx.adobe.com/security/products/bridge/apsb22-03.html

References

• CVE Record
• NVD entry

Related

• CVE-2021-3036
• CVE-2021-3064
• CVE-2021-35211
• CVE-2021-44168
• CVE-2021-45468
• CVE-2022-42475