CVE-2019-7970

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability

published August 26, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky type confusion bug in Adobe Photoshop CC could let crafty attackers execute arbitrary code! 🚨 Think of this vulnerability like a restaurant mislabeling its menu items. A diner orders a dish labeled 'safe,' but they actually receive something entirely different, potentially harmful. In this case, Photoshop is mixing up data types, allowing an intruder to slip in some unwanted code. If successfully exploited, an attacker could take control of the system, running any code they desire — a digital nightmare for unsuspecting users! This could mean anything from stealing sensitive files to hijacking the system entirely. The potential fallout could be absolutely devastating!

Put simply

Think of this vulnerability like a restaurant mislabeling its menu items. A diner orders a dish labeled 'safe,' but they actually receive something entirely different, potentially harmful. In this case, Photoshop is mixing up data types, allowing an intruder to slip in some unwanted code. This type confusion vulnerability affects Adobe Photoshop CC versions 19.1.8 and earlier, as well as 20.0.5 and earlier, allowing attackers to execute arbitrary code by manipulating data types in memory.

What to do

If successfully exploited, an attacker could take control of the system, running any code they desire — a digital nightmare for unsuspecting users! This could mean anything from stealing sensitive files to hijacking the system entirely. The potential fallout could be absolutely devastating! To protect yourself, update Adobe Photoshop to the latest version immediately. Ensure you're on a version that is patched against this vulnerability. Regularly check for software updates to keep your defenses strong! You've got this! Stay vigilant, keep your software updated, and you'll maintain your superhero status in the digital world! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 · 93.7th percentile
Published
2019-08-26T17:27Z
EPSS history
Timeline
  • 26 AUG 17:27Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability
    cvelistv5