Adobe Premiere Rush vulnerabilities

Latest Adobe Premiere Rush CVEs

Newest publication first

1. CVE-2023-22234 Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arbitrary code execution

   Published 2023-02-17

   High·CVSS 7.8 EPSS 0.40%

   Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious f...

2. CVE-2023-22244 Adobe Premiere Rush PSD files Use After Free Arbitrary code execution

   Published 2023-02-17

   High·CVSS 7.8 EPSS 0.37%

   Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

3. CVE-2022-23204 Adobe Premiere Rush JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

   Published 2022-02-16

   Medium·CVSS 5.5 EPSS 1.9%

   Adobe Premiere Rush versions 2.0 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interacti...

4. CVE-2021-43746 Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

   Published 2021-12-20

   Medium·CVSS 5.5 EPSS 1.8%

   Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this vulnerability in that the target must v...

5. CVE-2021-43750 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service

   Published 2021-12-20

   Medium·CVSS 5.5 EPSS 1.4%

   Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue req...

6. CVE-2021-43023 Adobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code Execution

   Published 2021-12-20

   High·CVSS 7.8 EPSS 2.4%

   Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EPS/TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit t...

7. CVE-2021-43030 Adobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability

   Published 2021-12-20

   Low·CVSS 3.3 EPSS 1.4%

   Adobe Premiere Rush versions 1.5.16 (and earlier) allows access to an uninitialized pointer vulnerability that allows remote attackers to disclose arbitrary data on affected installations. User interaction is required to exploit this vulnerability in that the target must visit a...

8. CVE-2021-43025 Adobe Premiere Rush SVG File Memory Corruption Remote Code Execution

   Published 2021-12-20

   High·CVSS 7.8 EPSS 2.4%

   Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

9. CVE-2021-43749 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service

   Published 2021-12-20

   Medium·CVSS 5.5 EPSS 1.4%

   Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue req...

10. CVE-2021-40784 Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.1%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

11. CVE-2021-43748 Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service

    Published 2021-12-20

    Medium·CVSS 5.5 EPSS 1.4%

    Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue req...

12. CVE-2021-43024 Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

13. CVE-2021-43022 Adobe Premiere Rush PNG File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PNG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

14. CVE-2021-43747 Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

15. CVE-2021-43029 Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

16. CVE-2021-43021 Adobe Premiere Rush EXR File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious EXR file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

17. CVE-2021-43028 Adobe Premiere Rush M4A File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

18. CVE-2021-40783 Adobe Premiere Rush WAV File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.1%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

19. CVE-2021-43026 Adobe Premiere Rush MXF File Memory Corruption Remote Code Execution

    Published 2021-12-20

    High·CVSS 7.8 EPSS 2.3%

    Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious MXF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this v...

20. CVE-2020-9617 Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

    Published 2020-06-26

    Medium·CVSS 5.5 EPSS 2.9%

    Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

21. CVE-2020-9657 Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

    Published 2020-06-25

    High·CVSS 7.8 EPSS 4.6%

    Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

22. CVE-2020-9655 Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .

    Published 2020-06-25

    High·CVSS 7.8 EPSS 6.3%

    Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to arbitrary code execution .

23. CVE-2020-9656 Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

    Published 2020-06-25

    High·CVSS 7.8 EPSS 4.2%

    Adobe Premiere Rush versions 1.5.12 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.