CVE-2020-3775

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability

published March 25, 2020

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

⚠️ A crafty mishap in Adobe Photoshop could let an attacker run arbitrary code just by opening a specially crafted file! 🔥 Think of it like a chef who receives a food order without checking the ingredients — if the order's tainted, the dish comes out a disaster. In this case, the buffer error lets harmful code sneak in through opened files, leading to chaos. An attacker could potentially take control of your system, manipulate files, install malware, or even snoop on sensitive data. This scenario could turn your creative workspace into an attacker’s playground, which is absolutely devastating!

Put simply

Think of it like a chef who receives a food order without checking the ingredients — if the order's tainted, the dish comes out a disaster. In this case, the buffer error lets harmful code sneak in through opened files, leading to chaos. This vulnerability in Adobe Photoshop arises from buffer errors in versions 20.0.8 and earlier for CC 2019, and 21.1 and earlier for Photoshop 2020. By exploiting these errors, an attacker could execute arbitrary code on the affected systems.

What to do

An attacker could potentially take control of your system, manipulate files, install malware, or even snoop on sensitive data. This scenario could turn your creative workspace into an attacker’s playground, which is absolutely devastating! To protect yourself, update your Adobe Photoshop to the latest version immediately. If you’re using any versions mentioned, don’t delay! Regularly check for updates to patch vulnerabilities as they arise. You’ve got this! Stay vigilant and secure your creative tools. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04888 · 92.0th percentile
Published
2020-03-25T20:33Z
EPSS history
Timeline
  • 25 MAR 20:33Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability
    cvelistv5