CVE-2021-21006: Heap buffer overflow when handling crafted font file could lead to arbitrary code execution
Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21006?
CVE-2021-21006 is a heap buffer overflow vulnerability in Adobe Photoshop version 22.1 and earlier.
How severe is CVE-2021-21006?
CVE-2021-21006 has a severity score of 8.6, indicating a high severity.
How does CVE-2021-21006 affect Adobe Photoshop?
CVE-2021-21006 affects Adobe Photoshop version 22.1 and earlier, allowing arbitrary code execution if a specially crafted font file is opened.
Is macOS vulnerable to CVE-2021-21006?
No, Apple macOS is not vulnerable to CVE-2021-21006.
Is Microsoft Windows vulnerable to CVE-2021-21006?
No, Microsoft Windows is not vulnerable to CVE-2021-21006.
How can I fix CVE-2021-21006?
Update to the latest version of Adobe Photoshop to mitigate CVE-2021-21006.