CVE-2020-3782

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
4.3MEDIUM
EPSS
2.4%
top 14.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Adobe Photoshop 2020Adobe Photoshop CCAdobe Adobe Photoshop
Timeline
PublishedMar 25
Latest updateMay 24

Description

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶NVDadobe/photoshop_202021.0 — 21.1
▶NVDadobe/photoshop_cc20.0 — 20.0.8
▶CVEListV5adobe/adobe_photoshopPhotoshop CC 2019, and Photoshop 2020 versions

🔴Vulnerability Details

2
GHSA
GHSA-c2c9-x42h-79f4: Adobe Photoshop CC 2019 versions 20↗2022-05-24
▶
CVEList
CVE-2020-3782: Adobe Photoshop CC 2019 versions 20↗2020-03-25
▶
CVE-2020-3782 (MEDIUM CVSS 4.3) | Adobe Photoshop CC 2019 versions 20 | cvebase.io