First published: Wed Mar 25 2020(Updated: )
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Photoshop 2020 | >=21.0<=21.1 | |
Adobe Photoshop CC | >=20.0<=20.0.8 | |
Apple macOS | ||
Microsoft Windows |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-3779.
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier are affected.
The severity of CVE-2020-3779 is high, with a CVSS score of 8.8.
Successful exploitation of this vulnerability could lead to arbitrary code execution.
No, Apple macOS and Microsoft Windows are not vulnerable to this vulnerability.
Update Adobe Photoshop CC 2019 to version 20.0.9 or later, and Photoshop 2020 to version 21.1.1 or later to mitigate this vulnerability.
You can find more information about this vulnerability on the Adobe Security Bulletin APSB20-14: [https://helpx.adobe.com/security/products/photoshop/apsb20-14.html](https://helpx.adobe.com/security/products/photoshop/apsb20-14.html)