CVE-2020-3787

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

published March 25, 2020

CVSS
—
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

⚠️ A memory corruption vulnerability in Adobe Photoshop could let an attacker execute arbitrary code, like a painter using faulty brushes to create a masterpiece of chaos! 🎨 Think of it like a skilled chef working in a restaurant kitchen. If a recipe calls for a dash of this and a pinch of that, but the chef misreads the instructions, they could accidentally create a dish that’s inedible—or worse, poses a serious health risk! Here, memory corruption can lead to unintended consequences. If exploited, this vulnerability could allow an attacker to craft a malicious file that, once opened in Photoshop, gives them the keys to your digital kingdom. That could mean anything from stealing sensitive data to taking full control of your machine—an absolutely devastating scenario for any user!

Put simply

Think of it like a skilled chef working in a restaurant kitchen. If a recipe calls for a dash of this and a pinch of that, but the chef misreads the instructions, they could accidentally create a dish that’s inedible—or worse, poses a serious health risk! Here, memory corruption can lead to unintended consequences. CVE-2020-3787 is a memory corruption vulnerability found in Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier). It opens the door for attackers to execute arbitrary code under certain conditions, making it a serious concern for users.

What to do

If exploited, this vulnerability could allow an attacker to craft a malicious file that, once opened in Photoshop, gives them the keys to your digital kingdom. That could mean anything from stealing sensitive data to taking full control of your machine—an absolutely devastating scenario for any user! To protect yourself, update to the latest version of Adobe Photoshop immediately. Adobe has released patches to address this vulnerability, so make sure you’re running version 20.0.9 or later for CC 2019 and version 21.1.1 or later for Photoshop 2020. 🛡️ You've got this! By updating your software, you're taking a huge step towards keeping your creative work safe and secure. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03940 · 90.3th percentile
Published
2020-03-25T20:31Z
EPSS history
Timeline
  • 25 MAR 20:31Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability
    cvelistv5