CVE-2021-40736 Adobe Audition Memory Corruption could lead to Arbitrary code execution

What is CVE-2021-40736?

CVE-2021-40736 is a high-severity memory corruption vulnerability in Adobe Audition, published on 16 Mar 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Weakness: CWE-119, CWE-788

Which versions are affected by CVE-2021-40736?

It affects 1 product.

Products include Adobe Audition.

How do I fix CVE-2021-40736?

No fix has been published for CVE-2021-40736 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2021-40736 being exploited?

There is no known exploitation of CVE-2021-40736 in the wild and no public exploit code.

Other vulnerabilities in Adobe Audition

• CVE-2011-0614 Memory corruption in n/a Critical 9.3
• CVE-2011-0615 Memory corruption in n/a Critical 9.3
• CVE-2026-47967 Audition | Out-of-bounds Write (CWE-787) High 7.8
• CVE-2026-47968 Audition | Out-of-bounds Write (CWE-787) High 7.8
• CVE-2026-48309 Audition | Out-of-bounds Write (CWE-787) High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-m898-7pmc-9h9g.