Adobe Xmp Toolkit Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Xmp Toolkit Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (28)

• CVE-2021-36064 — CVSS 7.8 (high): XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could result in arbitrary code execution in…
• CVE-2021-36048 — CVSS 7.8 (high): XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary…
• CVE-2021-39847 — CVSS 7.8 (high): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary…
• CVE-2021-36050 — CVSS 7.8 (high): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code…
• CVE-2021-42529 — CVSS 7.8 (high): XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary…
• CVE-2021-36051 — CVSS 7.8 (high): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code…
• CVE-2021-36052 — CVSS 7.8 (high): XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code…
• CVE-2021-42532 — CVSS 7.8 (high): XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary…
• CVE-2021-42531 — CVSS 7.8 (high): XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary…
• CVE-2021-36055 — CVSS 7.8 (high): XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution…
• CVE-2021-36046 — CVSS 7.8 (high): XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code…
• CVE-2021-42530 — CVSS 7.8 (high): XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary…
• CVE-2021-36047 — CVSS 7.8 (high): XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary…
• CVE-2021-40732 — CVSS 6.1 (medium): XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that could result in leaking data from…
• CVE-2025-30309 — CVSS 5.5 (medium): XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…
• CVE-2021-36056 — CVSS 5.5 (medium): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code…
• CVE-2021-36058 — CVSS 5.5 (medium): XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially resulting in application-level…
• CVE-2021-40716 — CVSS 5.5 (medium): XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of…
• CVE-2021-42528 — CVSS 5.5 (medium): XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An…
• CVE-2025-30305 — CVSS 5.5 (medium): XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…
• CVE-2025-30306 — CVSS 5.5 (medium): XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…
• CVE-2025-30307 — CVSS 5.5 (medium): XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…
• CVE-2025-30308 — CVSS 5.5 (medium): XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…
• CVE-2023-38210 — CVSS 5.5 (medium): Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could…
• CVE-2021-36057 — CVSS 3.3 (low): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a write-what-where condition vulnerability caused during the application's…
• CVE-2021-36054 — CVSS 3.3 (low): XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application…
• CVE-2021-36053 — CVSS 3.3 (low): XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of…
• CVE-2021-36045 — CVSS 3.3 (low): XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of…