CVE-2021-39830 HIGH

CVE-2021-39830: Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability

Vendor Adobe
Product FrameMaker
Weakness CWE-788
Published September 29, 2021
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Key dates

02Disclosure timeline

September 29, 2021 CVE published
April 23, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-40753 Adobe After Effects SVG File Parsing Memory Corruption Arbitrary Code Execution CVE-2021-40727 Adobe InDesign crashes when parsing the TIF file CVE-2024-20330 Cisco Firepower Threat Defense Software for Cisco Firepower 2100 Series TCP UDP Snort 2 and Snort 2 Denial of Service Vulnerability CVE-2021-42725 Adobe Bridge Memory Corruption could lead to Arbitrary code execution CVE-2021-42737 Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution