Out of Bounds Write Vulnerability in Adobe Photoshop by Adobe
CVE-2019-7994

8.8HIGH

Key Information:

Vendor
Adobe
Status
Adobe Photoshop Cc
Vendor
CVE Published:
26 August 2019

Summary

Adobe Photoshop CC versions 19.1.8 and earlier, along with versions 20.0.5 and earlier, contain an out of bounds write vulnerability that could potentially be exploited by attackers. This vulnerability allows for arbitrary code execution, enabling malicious users to manipulate system control and execute harmful instructions. Organizations using affected Photoshop versions must take necessary precautions to mitigate potential risks and enhance their cybersecurity posture.

Affected Version(s)

Adobe Photoshop CC <=19.1.8 and <=20.0.5

References

https://helpx.adobe.com/security/products/photoshop/apsb1...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.