This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-40732 →

DEBIAN-CVE-2021-40732

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory...

Original description

The description as published by the source.

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 exempi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]

Debian:13 exempi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]

Debian:14 exempi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-1"}]}]

References

advisory security-tracker.debian.org