CVE-2020-3788

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

published March 25, 2020

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

⚠️ Memory corruption in Adobe Photoshop could let an attacker run arbitrary code! Imagine your graphics software being hijacked without your knowledge! 🎨 Think of it like a painter who accidentally spills paint on their canvas, causing the entire artwork to change unpredictably. In this case, the corrupted memory allows malicious code to alter the behavior of Photoshop, potentially leading to disastrous consequences. With this vulnerability, an attacker could gain control over your system by executing arbitrary code. This means they could steal data, manipulate files, or even spread malware — all from something as innocuous as opening a Photoshop file. It's a serious threat to your creative work and your system's integrity.

Put simply

Think of it like a painter who accidentally spills paint on their canvas, causing the entire artwork to change unpredictably. In this case, the corrupted memory allows malicious code to alter the behavior of Photoshop, potentially leading to disastrous consequences. This memory corruption vulnerability in Adobe Photoshop allows attackers to exploit the software by executing harmful code due to improper handling of memory resources, specifically affecting versions 20.0.8 and earlier for CC 2019, and 21.1 and earlier for Photoshop 2020.

What to do

With this vulnerability, an attacker could gain control over your system by executing arbitrary code. This means they could steal data, manipulate files, or even spread malware — all from something as innocuous as opening a Photoshop file. It's a serious threat to your creative work and your system's integrity. To protect yourself, update Adobe Photoshop to the latest version immediately. Always ensure you’re running software with the most recent patches to avoid these vulnerabilities. Regularly review your security settings to minimize potential risks. You've got this! By staying updated, you're taking a huge step toward keeping your creative space safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03940 · 90.4th percentile
Published
2020-03-25T20:35Z
EPSS history
Timeline
  • 25 MAR 20:35Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability
    cvelistv5