Out-of-bounds read in Adobe Reader and Adobe Acrobat - CVE-2021-21042

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.

Affected software

How to mitigate CVE-2021-21042

Links to Public Exploits and PoC-codes

• Exploit #7091 - CVE-2021-21042 () (November 29, 2021)
• Exploit #5196 - CVE-2021-21042 (Exploit code for CVE-2021-21042) (March 7, 2021)

External References

• https://helpx.adobe.com/security/products/acrobat/apsb21-09.html

Related Security Bulletins

• Multiple vulnerabilities in Adobe Reader and Acrobat