CVE-2019-7992

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability

published August 26, 2019

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

⚠️ An out of bounds write in Adobe Photoshop could let attackers run their own code! Just think about it — a feature that’s meant to create art could be weaponized against you! This vulnerability is like a mischievous artist who sneaks extra paint onto the canvas, completely ignoring the original design — they could end up creating something totally unexpected! If an attacker successfully exploits this flaw, they could execute arbitrary code on your system, meaning they could take control or manipulate your computer however they like. Talk about an artistic nightmare!

Put simply

This vulnerability is like a mischievous artist who sneaks extra paint onto the canvas, completely ignoring the original design — they could end up creating something totally unexpected! CVE-2019-7992 is an out of bounds write vulnerability found in Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier. This flaw allows attackers to overwrite memory locations, leading to arbitrary code execution.

What to do

If an attacker successfully exploits this flaw, they could execute arbitrary code on your system, meaning they could take control or manipulate your computer however they like. Talk about an artistic nightmare! Update Adobe Photoshop to the latest version immediately to patch this vulnerability. Ensure all users are on versions 20.0.6 or later to close this security gap. Regularly check for updates to keep your software secure! You've got this! By taking these steps, you’ll be securing your digital canvas like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05072 · 92.3th percentile
Published
2019-08-26T18:47Z
EPSS history
Timeline
  • 26 AUG 18:47Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability
    cvelistv5