This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-36045 →
DEBIAN-CVE-2021-36045
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. A...
Original description
The description as published by the source.
XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
exempi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]
Debian:13
exempi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]
Debian:14
exempi
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]
References
- advisory security-tracker.debian.org