CVE-2021-42531

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121CWE-787

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-425327.8XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary CVE-2021-425337.8Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in CVE-2021-425346.1The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inCVE-2021-425356.1VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output usedCVE-2021-425366.5The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables.CVE-2021-425377.5VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the inteCVE-2021-425388.8The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input.CVE-2021-425398.8The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unCVE-2021-42546.1A vulnerability has been found in ctrlo lenio and classified as problematic. Affected by this vulnerability is an unknown functionality of tCVE-2021-425408.8The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic tCVE-2021-425428.8The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.CVE-2021-425437.8The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, sy
CVE-2021-42531: High severity, CVSS 7.8 | Vulnix