CVE-2021-40701 is a memory corruption vulnerability in Adobe Premiere Elements 2021.2235820 and earlier, affecting both Windows and macOS platforms. This flaw arises from insecure handling of malicious M4A files, which could lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, such as opening a specially crafted file. The vulnerability is rated as High severity (CVSS 7.8), indicating a significant potential impact on confidentiality, integrity, and availability if successfully exploited. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2021.1CPE matchmatch criteria | cpe:2.3:a:adobe:premiere_elements:*:*:*:*:*:*:*:* | ||
<= 2021.2235820CPE match | cpe:2.3:a:adobe:premiere:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.