Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

28 records

TI-2025-21626 CVE-2025-30308 · GHSA-gx9w-r4j8-6p7h

XMPWorker | Out-of-bounds Read (CWE-125)

Priority LOW 24

XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0025 Published 2025-04-08 No fix listed CWE-125
TI-2025-21625 CVE-2025-30307 · GHSA-cqwm-8779-r274

XMPWorker | Out-of-bounds Read (CWE-125)

Priority LOW 24

XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0025 Published 2025-04-08 No fix listed CWE-125
TI-2025-21623 CVE-2025-30305 · GHSA-wgxm-3jgj-5pwf

XMPWorker | Out-of-bounds Read (CWE-125)

Priority LOW 24

XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0025 Published 2025-04-08 No fix listed CWE-125
TI-2025-21624 CVE-2025-30306 · GHSA-v236-qrg8-r7vx

XMPWorker | Out-of-bounds Read (CWE-125)

Priority LOW 24

XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00252 Published 2025-04-08 No fix listed CWE-125
TI-2025-21627 CVE-2025-30309 · GHSA-65g2-h96w-cwp4

XMPWorker | Out-of-bounds Read (CWE-125)

Priority LOW 24

XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00252 Published 2025-04-08 No fix listed CWE-125
Priority LOW 25

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00363 Published 2023-08-10 Will not fix CWE-400
TI-2021-17682 CVE-2021-40732 · GHSA-3gp9-w4vx-8hh2

XMP Toolkit SDK Null Pointer Dereference

Priority LOW 32

XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from certain memory locations and causing a local denial of service in the context of the…

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.02438 Published 2021-10-13 No fix listed CWE-476
Priority MEDIUM 43

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.05785 Published 2021-10-04 No fix listed CWE-122
Priority LOW 39

XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02704 Published 2021-09-01 No fix listed CWE-124
Priority LOW 31

XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.03734 Published 2021-09-01 No fix listed CWE-122
Priority MEDIUM 40

XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0322 Published 2021-09-01 No fix listed CWE-788
Load more