CVE-2020-3785 - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

Back Back to CVE browser

CRITICAL

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability

Published Mar 25, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 3.94%

Description

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

Vendor Adobe Product Adobe Photoshop Default
unknown
Affected
- Photoshop CC 2019, and Photoshop 2020 versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Adobe	Adobe Photoshop	unknown	Affected Photoshop CC 2019, and Photoshop 2020 versions

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25050
Advisory
https://helpx.adobe.com/security/products/photoshop/apsb20-14.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25050		Advisory
https://helpx.adobe.com/security/products/photoshop/apsb20-14.html		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner adobe

Published Mar 25, 2020

Updated Aug 4, 2024

Reserved Dec 17, 2019

Link CVE-2020-3785

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-3785

Red Hat

No data

ENISA EUVD

Assigner adobe

Published Mar 25, 2020

Updated Aug 4, 2024

Link EUVD-2020-25050

GitHub

No data