CVE-2021-40732: Adobe Xmp Toolkit Software Development Kit

Medium severity, CVSS 6.1. EPSS: 2.4% chance of exploitation in the next 30 days.

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the current user. User interaction is required to exploit this vulnerability in that the victim will need to open a specially crafted MXF file.

Affected products

• Adobe Xmp Toolkit Software Development Kit: up to and including 2020.1
• Debian Debian Linux: version 10.0 only

Published 2021-10-13. Last modified 2026-06-17.