CVE-2019-7972

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability

published August 26, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A type confusion glitch in Adobe Photoshop CC could let an attacker run arbitrary code, turning your creative masterpiece into a nightmare! Think of it like a chef misreading a recipe—using salt instead of sugar. This mishap can ruin a dish, just as a simple error in code can unleash chaos on your system! If exploited, this vulnerability could allow attackers to execute any code on your machine—imagine them taking over your editing software and wreaking havoc on your precious projects! It’s a serious risk for anyone using the affected versions of Photoshop, potentially leading to data loss or unwanted changes.

Put simply

Think of it like a chef misreading a recipe—using salt instead of sugar. This mishap can ruin a dish, just as a simple error in code can unleash chaos on your system! This vulnerability arises from type confusion, enabling an attacker to manipulate memory allocations and execute arbitrary code in the context of the user running Photoshop. It’s like a misplaced ingredient throwing off the whole recipe of your program!

What to do

If exploited, this vulnerability could allow attackers to execute any code on your machine—imagine them taking over your editing software and wreaking havoc on your precious projects! It’s a serious risk for anyone using the affected versions of Photoshop, potentially leading to data loss or unwanted changes. To protect yourself, update your Adobe Photoshop to the latest version immediately. Regularly check for updates and ensure your software is always running the most secure version available. Don’t let this slip through the cracks! You’ve got this! By following these steps, you’ll keep your system safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 · 93.7th percentile
Published
2019-08-26T17:29Z
EPSS history
Timeline
  • 26 AUG 17:29Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability
    cvelistv5