CVE-2020-3789

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

published March 25, 2020

CVSS
โ€”
EPSS
4%
Percentile
90.3
In the wild
Unconfirmed
What it is

โš ๏ธ A memory corruption vulnerability in Adobe Photoshop could let an attacker run wild with arbitrary code! ๐Ÿ“ธ Think of it like a barista who, instead of following the recipe, decides to whip up whatever they want when you order your coffee. If they get it wrong, you might end up with something completely unexpected โ€” or worse! In this case, an attacker could exploit this vulnerability to execute any code they want on the affected system. This means they could potentially steal sensitive information, change files, or even render your system unusable โ€” a nightmare for any creative mind!

Put simply

Think of it like a barista who, instead of following the recipe, decides to whip up whatever they want when you order your coffee. If they get it wrong, you might end up with something completely unexpected โ€” or worse! The vulnerability arises from how Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier) manage memory, leading to potential arbitrary code execution when manipulated.

What to do

In this case, an attacker could exploit this vulnerability to execute any code they want on the affected system. This means they could potentially steal sensitive information, change files, or even render your system unusable โ€” a nightmare for any creative mind! To protect yourself, ensure you update to Adobe Photoshop CC 2019 version 20.0.9 or newer, and Photoshop 2020 version 21.1.1 or newer. It's essential to regularly check for updates to keep your software secure. You've got this! Stay updated and your creative workspace will be safer than ever! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03940 ยท 90.3th percentile
Published
2020-03-25T20:33Z
EPSS history
Timeline
  • 25 MAR 20:33Z
    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability
    cvelistv5