CVE-2023-26370: ZDI-CAN-21257: Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability
Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-26370?
CVE-2023-26370 is an Access of Uninitialized Pointer vulnerability in Adobe Photoshop versions 23.5.5 and earlier, as well as version 24.7 and earlier.
How severe is CVE-2023-26370?
CVE-2023-26370 has a severity score of 7.8, which is considered high.
How can the Access of Uninitialized Pointer vulnerability in Adobe Photoshop be exploited?
Exploiting the Access of Uninitialized Pointer vulnerability in Adobe Photoshop requires user interaction, where a victim must open a malicious file.
Which versions of Adobe Photoshop are affected by CVE-2023-26370?
Adobe Photoshop versions 23.5.5 and earlier, as well as version 24.7 and earlier, are affected by CVE-2023-26370.
Where can I find more information about CVE-2023-26370?
You can find more information about CVE-2023-26370 on the Adobe Security Bulletin APSB23-51.