CVE-2021-21051: Buffer Overflow
First published: Thu Feb 11 2021(Updated: )
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Photoshop | <=21.2.4 | |
| Adobe Photoshop | >=22.0<=22.1.1 | |
| Apple macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for the Adobe Photoshop Buffer Overflow vulnerability?
The vulnerability ID for the Adobe Photoshop Buffer Overflow vulnerability is CVE-2021-21051.
Which versions of Adobe Photoshop are affected by the Buffer Overflow vulnerability?
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by the Buffer Overflow vulnerability.
What is the severity of the Adobe Photoshop Buffer Overflow vulnerability?
The severity of the Adobe Photoshop Buffer Overflow vulnerability is critical with a CVSS score of 7.8.
How can an attacker exploit the Adobe Photoshop Buffer Overflow vulnerability?
An attacker can leverage the Adobe Photoshop Buffer Overflow vulnerability by parsing a specially crafted javascript file, allowing them to achieve arbitrary code execution.
Is Apple macOS or Microsoft Windows vulnerable to the Adobe Photoshop Buffer Overflow vulnerability?
No, Apple macOS and Microsoft Windows are not vulnerable to the Adobe Photoshop Buffer Overflow vulnerability.
Where can I find more information about the Adobe Photoshop Buffer Overflow vulnerability?
You can find more information about the Adobe Photoshop Buffer Overflow vulnerability at the following link: [Adobe Security Bulletin APSB21-10](https://helpx.adobe.com/security/products/photoshop/apsb21-10.html).
What are the CWE IDs associated with the Adobe Photoshop Buffer Overflow vulnerability?
The CWE IDs associated with the Adobe Photoshop Buffer Overflow vulnerability are CWE-119 and CWE-120.
- collector/nvd-index
- agent/weakness
- agent/type
- vendor/adobe
- canonical/adobe photoshop
- version/adobe photoshop/21.2.4
- version/adobe photoshop/22.0
- version/adobe photoshop/22.1.1
- vendor/apple
- canonical/apple macos
- vendor/microsoft
- canonical/microsoft windows