CVE-2019-7997

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability

published August 26, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky out-of-bounds write in Adobe Photoshop could let attackers run wild—like a rogue artist taking over the whole gallery! Think of it as an unguarded art studio where an unauthorized visitor can not only rearrange your masterpieces but also add their own chaos to the mix. With this vulnerability, an attacker could manipulate the inner workings of Photoshop itself, leading to unexpected actions. If exploited, this vulnerability could allow an attacker to execute arbitrary code, essentially giving them the keys to your creative kingdom! Imagine losing control of your tools, with malicious code running amok and possibly compromising sensitive data or system integrity.

Put simply

Think of it as an unguarded art studio where an unauthorized visitor can not only rearrange your masterpieces but also add their own chaos to the mix. With this vulnerability, an attacker could manipulate the inner workings of Photoshop itself, leading to unexpected actions. This vulnerability allows for out-of-bounds writes in Adobe Photoshop CC versions 19.1.8 and earlier, and 20.0.5 and earlier, meaning that it could write data to unintended memory locations, potentially leading to arbitrary code execution.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code, essentially giving them the keys to your creative kingdom! Imagine losing control of your tools, with malicious code running amok and possibly compromising sensitive data or system integrity. Ensure you're on at least version 19.1.9 or 20.0.6 to patch this vulnerability. Regularly check for updates and apply them promptly to keep your artistic endeavors secure. 💡 You've got this! Stay proactive, keep your software updated, and you'll keep your creative space secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06433 · 93.7th percentile
Published
2019-08-26T18:53Z
EPSS history
Timeline
  • 26 AUG 18:53Z
    Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability
    cvelistv5