CVE-2019-7094

Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability

published May 24, 2019

CVSS
โ€”
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

๐Ÿšจ A heap corruption vulnerability in Adobe Photoshop could allow attackers to run code of their choice! ๐Ÿ“ธ Think of it as a chef accidentally mixing up the key ingredients in a signature dish โ€” it could result in a recipe that tastes completely off, or even worse, something that could harm someone. In the same way, this flaw can let an attacker take control of your system, creating chaos! If exploited, an attacker could run arbitrary code on your machine, potentially leading to unauthorized access, data theft, or even complete system compromise. This could be devastating for users, especially those handling sensitive or creative projects in Photoshop.

Put simply

Think of it as a chef accidentally mixing up the key ingredients in a signature dish โ€” it could result in a recipe that tastes completely off, or even worse, something that could harm someone. In the same way, this flaw can let an attacker take control of your system, creating chaos! The vulnerability stems from improper validation of heap memory operations in Adobe Photoshop CC versions 19.1.7 and earlier, as well as 20.0.2 and earlier, enabling attackers to craft malicious input that could lead to unexpected behavior and arbitrary code execution.

What to do

If exploited, an attacker could run arbitrary code on your machine, potentially leading to unauthorized access, data theft, or even complete system compromise. This could be devastating for users, especially those handling sensitive or creative projects in Photoshop. To protect yourself, update to the latest version of Adobe Photoshop immediately. Always ensure you're running the most current software to avoid vulnerabilities like this one. Check for patches regularly and consider practicing safe browsing habits to minimize risks. You've got this! Stay proactive and secure your creative space! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 ยท 93.7th percentile
Published
2019-05-24T18:47Z
EPSS history
Timeline
  • 24 MAY 18:47Z
    Adobe Photoshop CC 19.1.7 and earlier, and 20.0.2 and earlier have a heap corruption vulnerability
    cvelistv5