CVE-2020-3786

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

published March 25, 2020

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

⚠️ A crafty memory corruption bug lurks in Adobe Photoshop CC 2019 and 2020! An attacker could exploit this, leading down a path of mayhem! 🔥 Think of it like a recipe that calls for a specific amount of flour. If the chef accidentally throws in twice the amount, the whole dish could be ruined. In this case, the memory corruption means that Photoshop might execute commands it shouldn’t, like a recipe gone wildly wrong. If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, potentially leading to everything from data breaches to the installation of malicious software. Imagine someone hijacking your kitchen and cooking up something dangerous! 📉 It's a situation you absolutely want to avoid.

Put simply

Think of it like a recipe that calls for a specific amount of flour. If the chef accidentally throws in twice the amount, the whole dish could be ruined. In this case, the memory corruption means that Photoshop might execute commands it shouldn’t, like a recipe gone wildly wrong. This memory corruption vulnerability in Adobe Photoshop allows an attacker to manipulate how the application processes data, potentially leading to arbitrary code execution if successful. This means they could run any code they wish with the same privileges as the user running Photoshop.

What to do

If exploited, this vulnerability could allow attackers to execute arbitrary code on your system, potentially leading to everything from data breaches to the installation of malicious software. Imagine someone hijacking your kitchen and cooking up something dangerous! 📉 It's a situation you absolutely want to avoid. To protect yourself, make sure to update Adobe Photoshop to the latest version available. Regularly check for updates and consider enabling automatic updates to ensure you are always using the most secure version. 🛡️ You've got this! By staying proactive and keeping your software updated, you're on the frontlines of security! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03940 · 90.3th percentile
Published
2020-03-25T20:30Z
EPSS history
Timeline
  • 25 MAR 20:30Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability
    cvelistv5