CVE-2021-36007

Name of the Vulnerable Software and Affected Versions Adobe Prelude versions 10.0 and earlier

Description The issue is related to an uninitialized variable vulnerability when parsing a specially crafted file, which could allow an unauthenticated attacker to disclose arbitrary memory information in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious file. The vulnerability is also associated with insufficient input validation, potentially allowing an attacker to execute arbitrary code using a specially crafted file.

Recommendations For Adobe Prelude versions 10.0 and earlier, update to a version that addresses the uninitialized variable vulnerability to prevent exploitation. As a temporary workaround, consider avoiding the use of specially crafted files that could trigger the vulnerability until a patch is available. Restrict access to untrusted files to minimize the risk of exploitation.