Adobe Premiere Security Update Addresses 11 Flaws, Including Code Execution

Adobe announced a security update for Premiere in bulletin APSB26-101, detailing 11 vulnerabilities: eight that could allow arbitrary code execution, two permitting arbitrary file system access, and one causing application denial-of-service. The code-execution flaws include buffer overflows, a buffer underwrite, out-of-bounds writes, and an untrusted search path; all are rated High with CVSS scores of 7.8. Missing authentication could enable arbitrary file system writes, while path traversal could enable arbitrary reads; both are rated High at 7.1. A NULL pointer dereference is rated Medium at 5.5.

The buffer-underwrite weakness, classified as CWE-124, involves writing before the beginning of a buffer, potentially corrupting memory, crashing the application, or enabling unauthorized code execution. Organizations using Premiere should review Adobe’s bulletin for affected releases and deploy the applicable security update, prioritizing systems exposed to untrusted media and project files. The supplied advisory excerpt does not specify affected versions, fixed builds, CVE identifiers, or whether exploitation has occurred.