CVE-2021-36077: Adobe Bridge SVG File Memory Corruption Could Lead To Application…

Description

Adobe Bridge version 11.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious SVG file, potentially resulting in local application denial of service in the context of the current user. User interaction is required to exploit this vulnerability.

Scores

CVSS scores of CVE-2021-36077, by who scored it
Scored by	CVSS	Score	Vector
adobeCNA (assigner)	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVDNVD · Modified	3.1	Medium5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 2.3% · top 17% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Weakness

CWE-788: Access of Memory Location After End of Buffer (CWE-788) (opens in a new tab)All about CWE-788 and its CVEs
CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

Adobe · Bridge
- affected unspecified – ≤ 11.1
- affected unspecified – ≤ None

References (1)

https://helpx.adobe.com/security/products/bridge/apsb21-69.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2021-36077](https://trackcve.app/badge/CVE-2021-36077.svg)](https://trackcve.app/cve/CVE-2021-36077)

Record last updated 17 Sept 2024, 03:18 UTC.

Adobe Bridge SVG File Memory Corruption Could Lead To Application Denial Of Service