High severity7.8NVD Advisory· Published Sep 1, 2021· Updated Jun 17, 2026
CVE-2021-36055
CVE-2021-36055
Description
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
2- Range: <=2020.1
- Adobe/XMP Toolkitv5Range: unspecified
Patches
Vulnerability mechanics
References
3- helpx.adobe.com/security/products/xmpcore/apsb21-65.htmlnvdPatchVendor Advisory
- lists.debian.org/debian-lts-announce/2023/09/msg00032.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2025/08/msg00003.htmlnvd
News mentions
0No linked articles in our index yet.