What’s Vulnerable › Vulnerabilities

CVE-2021-36057: XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-01 · updated 2026-06-17
• Weakness: CWE-123

Description

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become mismatched resulting in local application denial of service in the context of the current user.

Affected products

• Adobe XMP Toolkit: through 2020.1
• Debian Linux: 10.0

References

• https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
• https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
• https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
• https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
• https://lists.debian.org/debian-lts-announce/2025/08/msg00003.html

Get alerted when CVE-2021-36057 or the next vulnerability affects your stack