CVE-2022-23203

Adobe Photoshop is affected by a buffer overflow (CVE-2022-23203) due to insecure handling of a crafted file, potentially allowing arbitrary code execution in the context of the current user. A victim must open a crafted file in Photoshop for exploitation; the root cause is improper handling of c...

CVE-2012-2027

CVE-2012-2027 concerns Adobe Photoshop CS5/CS5.1 where the TIFF image handling contains use-after-free and related buffer overflow weaknesses. The vulnerable components are in the TIFF processing paths (and related image handling routines) that could be triggered by opening a specially crafted TI...

CVE-2021-21082

Adobe Photoshop CVE-2021-21082 is a memory corruption vulnerability affecting version 21.2.5 and earlier, and 22.2 and earlier, triggered when parsing a specially crafted file. An unauthenticated attacker could exploit it to achieve arbitrary code execution in the context of the current user, wit...

CVE-2021-42734

Adobe Photoshop 22.5.1 and earlier are affected by an out-of-bounds read vulnerability in TIFF/file parsing that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Affected product/version: Photoshop 22.5.1 and earlier (Windows/macOS). M...

CVE-2022-24099

CVE-2022-24099 affects Adobe Photoshop versions 22.5.6 and earlier, and 23.2.2 and earlier, due to an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). Remediation present in connected docs: apply the Photoshop securi...

CVE-2007-2365

CVE-2007-2365 affects Adobe Photoshop CS2/CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9. It is a buffer overflow in PNG handling that allows an attacker to execute arbitrary code via a crafted PNG file. The vulnerability is user-assisted (requires opening a crafted image), with a CVS...

CVE-2022-38434

Adobe Photoshop CVE-2022-38434 affects Photoshop versions 22.5.8 and earlier, and 23.4.2 and earlier, due to a Use-After-Free vulnerability in SVG/File parsing that could allow arbitrary code execution. Exploitation requires user interaction (victim opens a malicious file). The issue is addressed...

CVE-2011-2131

Adobe Photoshop CS5/CS5.1 is affected by CVE-2011-2131 due to memory corruption caused by insufficient boundary checking when handling crafted GIF files. The vulnerability enables remote code execution (or memory corruption leading to DoS) when a user opens a malicious GIF. Evidence from multiple...

CVE-2023-21574

Adobe Photoshop is affected by an Improper Input Validation vulnerability (CVE-2023-21574) that can lead to arbitrary code execution in the context of the current user. Affected versions are Photoshop 23.5.3 and earlier, and 24.1 and earlier. The issue requires user interaction to exploit (victim...

CVE-2022-28273

Adobe Photoshop is affected by CVE-2022-28273 (font parsing out-of-bounds write) which could allow arbitrary code execution in the context of the current user. Affected versions: 22.5.6 and earlier, 23.2.2 and earlier. Exploitation requires user interaction (opening a malicious file). Mitigation:...

CVE-2022-34243

CVE-2022-34243 affects Adobe Photoshop 22.5.7 and earlier and 23.3.2 and earlier, with a Use-After-Free in U3D file parsing that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction (open a malicious file). Affected versions are addressed...

CVE-2023-25908

CVE-2023-25908 affects Adobe Photoshop versions up to 23.5.3 and 24.1.1 (and earlier). The issue is a Use-After-Free in processing SVG-like content that enables arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file...

CVE-2022-28275

Adobe Photoshop (versions 22.5.6 and earlier; 23.2.2 and earlier) are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file. The issue is documented under APSB22-20; re...

CVE-2022-34244

Adobe Photoshop is affected by an Access of Uninitialized Pointer vulnerability (CVE-2022-34244) in versions 22.5.7 and earlier, and 23.3.2 and earlier, with potential disclosure of memory and bypass of ASLR. Exploitation requires user interaction (open a malicious file). A fix is available: upda...

CVE-2022-28279

Adobe Photoshop CVE-2022-28279 is a font-parsing use-after-free remote code execution vulnerability affecting Photoshop 22.5.6 and earlier and 23.2.2 and earlier. Exploitation requires user interaction (open a malicious file). Connected sources confirm the issue and indicate fixes: update to Phot...

CVE-2022-24105

Adobe Photoshop versions 22.5.6 and earlier, and 23.2.2 and earlier, are affected by an out-of-bounds write vulnerability (CVE-2022-24105) that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious U3D file....

CVE-2022-38432

CVE-2022-38432 affects Adobe Photoshop (versions 22.5.8 and earlier, 23.4.2 and earlier). The issue is a heap-based buffer overflow in SVG file parsing that could yield arbitrary code execution in the context of the current user, with exploitation requiring user interaction (opening a malicious f...

CVE-2021-42735

CVE-2021-42735 affects Adobe Photoshop 22.5.1 and earlier. The vulnerability is a memory corruption (memory location after end of buffer) issue that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction. The issue is documented in NVD an...

CVE-2022-24098

Summary : Adobe Photoshop 22.x is affected by an input validation vulnerability in PCX parsing, enabling arbitrary code execution in the context of the current user. Root cause : improper input validation when parsing PCX files. Impact : potential remote code execution, requiring user interaction...

CVE-2024-20770

CVE-2024-20770 affects Adobe Photoshop Desktop up to versions 24.7.2 and 25.3.1 (and earlier). The issue is an out-of-bounds read that could disclose sensitive memory and potentially bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). Several connected sources...

CVE-2022-24090

CVE-2022-24090 in Adobe Photoshop affects versions 23.1.1 and earlier, and 22.5.5 and earlier. The issue is an out-of-bounds read that can lead to disclosure of sensitive memory, with an impact described as memory disclosure and potential bypass of ASLR. Exploitation requires user interaction (vi...

CVE-2022-38431

CVE-2022-38431 affects Adobe Photoshop up to version 22.5.8 and 23.4.2. It is an out-of-bounds read during parsing of a crafted file, potentially allowing code execution in the current user’s context. Exploitation requires user interaction (open a malicious file). Affected products are addressed ...

CVE-2022-28277

Adobe Photoshop is affected by an out-of-bounds write vulnerability in PDF parsing that could allow arbitrary code execution in the context of the current user. Affected versions: 22.5.6 and earlier, 23.2.2 and earlier. Exploitation requires user interaction, specifically opening a malicious PDF ...

CVE-2022-28276

Adobe Photoshop is affected by CVE-2022-28276 (Font Parsing Out‑Of‑Bounds Write). Affected versions: 22.5.6 and earlier, and 23.2.2 and earlier. Root cause: out‑of‑bounds write in font parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires us...

CVE-2022-38430

CVE-2022-38430 affects Adobe Photoshop up to 22.5.8 and 23.4.2 (and earlier) via an out-of-bounds read when parsing a crafted file, potentially allowing code execution in the user’s context. Exploitation requires user interaction (victim opens a malicious file). Connected advisories confirm a pat...

CVE-2021-28549

CVE-2021-28549 affects Adobe Photoshop versions 21.2.6 and earlier, and 22.3 and earlier. The vulnerability is a buffer overflow in the parser for specially crafted JSX files, allowing an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Exploitation...

CVE-2022-28274

Adobe Photoshop 22.5.6 and earlier, and 23.2.2 and earlier, are affected by an out-of-bounds read vulnerability in parsing crafted files that could allow code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). The issue is listed under APS...

CVE-2022-28278

CVE-2022-28278 affects Adobe Photoshop versions 22.5.6 and earlier and 23.2.2 and earlier, due to an out-of-bounds write in font parsing that could allow arbitrary code execution. Exploitation requires user interaction (opening a malicious file) and the impact is code execution in the context of ...

CVE-2022-28270

Summary (CVE-2022-28270) Adobe Photoshop versions 22.5.6 and earlier and 23.2.2 and earlier are affected by an out-of-bounds write vulnerability in SVG parsing that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open...

CVE-2022-35713

Adobe Photoshop (versions 22.5.8 and earlier, 23.4.2 and earlier) contains an out-of-bounds write in U3D file parsing that can lead to arbitrary code execution in the current user context. Exploitation requires the user to open a malicious file (low attack complexity, local exploitability, high i...

CVE-2022-38428

Adobe Photoshop: CVE-2022-38428 is a Use-After-Free vulnerability affecting Photoshop 22.5.8 and earlier, and 23.4.2 and earlier. The issue can disclose memory and bypass ASLR; exploitation requires user interaction (opening a malicious file). Connected advisories confirm it affects Windows/macOS...

CVE-2022-38433

Summary: CVE-2022-38433 affects Adobe Photoshop versions 22.5.8 and older, and 23.4.2 and older, which are vulnerable to a heap-based buffer overflow that could enable arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious...

CVE-2022-38426

CVE-2022-38426 affects Adobe Photoshop. The root cause is an Access of Uninitialized Pointer in the U3D/file parsing path, leading to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file). Affected products/versions inc...

CVE-2022-38429

Adobe Photoshop 22.5.8 and earlier, and 23.4.2 and earlier, are affected by an out-of-bounds read while parsing a crafted SVG file, enabling code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). Affected products are addressed by the APS...

CVE-2022-28272

CVE-2022-28272 affects Adobe Photoshop 22.x (22.5.6 and earlier) and 23.x (23.2.2 and earlier). The vulnerability is an out-of-bounds write in font parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (the victim opening a ...

CVE-2022-38427

CVE-2022-38427 affects Adobe Photoshop 22.5.8 and earlier and 23.4.2 and earlier. Root cause described as an Access of Uninitialized Pointer (U3D file parsing context) that could allow arbitrary code execution in the current user’s context; exploitation requires user interaction (victim must open...

CVE-2012-2028

Adobe Photoshop CS5/CS5.1 (12.x) is affected by CVE-2012-2028 via multiple heap-based buffer overflow vulnerabilities disclosed in APSB12-11. The issues arise in the TIFF image handling, U3D.8bi plugin, and a SGI24LogLum TIFF path, where improper input sanitization allows an unauthenticated, remo...

CVE-2022-28271

CVE-2022-28271 is a use-after-free vulnerability in Adobe Photoshop’s PDF parsing that could allow remote code execution in the context of the current user. Affected versions are Photoshop 22.5.6 and earlier, and 23.2.2 and earlier; exploitation requires the user to open a malicious PDF file. The...

CVE-2024-43756

CVE-2024-43756 | Photoshop Desktop: heap-based buffer overflow affecting version ranges 24.7.4, 25.11 and earlier. Root cause: heap-based overflow in affected component leading to arbitrary code execution in the current user context; exploitation requires user interaction (opening a malicious fil...

CVE-2021-28548

CVE-2021-28548 affects Adobe Photoshop versions 21.2.6 and earlier, and 22.3 and earlier. It is a buffer overflow in the parser for a specially crafted JSX file, allowing an unauthenticated attacker to trigger arbitrary code execution in the context of the current user. Exploitation requires user...

CVE-2021-21051

CVE-2021-21051 affects Adobe Photoshop versions 21.2.4 and 22.1.1 (and earlier). It is a Buffer Overflow vulnerability triggered while parsing a specially crafted javascript file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim ...

CVE-2022-23205

CVE-2022-23205 affects Adobe Photoshop versions 22.5.6 and earlier and 23.2.2 and earlier. It describes an out-of-bounds write in font parsing that could lead to arbitrary code execution in the context of the current user. Exploitation requires the user to open a malicious file (user interaction)...

CVE-2024-20753

Adobe Photoshop Desktop (Windows/macOS) is affected by CVE-2024-20753, an out-of-bounds read in PDF/file parsing that could allow code execution in the context of the current user. Affected versions include 24.7.3, 25.7 and earlier; exploitation requires the user to open a crafted file. Several c...

CVE-2021-21049

CVE-2021-21049 affects Adobe Photoshop versions 21.2.4 and earlier, and 22.1.1 and earlier. The issue is an Out-of-bounds Read when parsing a specially crafted file, allowing arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a ma...

CVE-2021-21050

CVE-2021-21050 affects Adobe Photoshop 21.2.4 and earlier, and 22.1.1 and earlier. The issue is an Out-of-bounds Read occurring while parsing a specially crafted file, allowing an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. Exploitation require...

CVE-2021-36065

Adobe Photoshop with CVE-2021-36065 (and CVE-2021-36066) is affected by a heap-based buffer overflow and an out-of-bounds write in versions 21.2.10 and earlier, and 22.4.3 and earlier. The root causes are memory corruption vulnerabilities that could allow arbitrary code execution in the context o...

CVE-2008-1765

CVE-2008-1765 : Buffer overflow in Adobe Photoshop Album Starter Edition 3.2 (and possibly After Effects CS3) allows code execution via a BMP file with an invalid image header. The issue is user-assisted or physically proximate, per vendor reports; related Photoshop CS3 issue tracked as CVE-2007-...

CVE-2010-3127

CVE-2010-3127 affects Adobe Photoshop CS2–CS5. The issue is an Insecure Library Loading/DLL hijacking vulnerability where a Trojan DLL (dwmapi.dll or Wintab32.dll) loaded from the current working folder can be used to execute arbitrary code, potentially locally or remotely. Affected products incl...

CVE-2021-21048

CVE-2021-21048 affects Adobe Photoshop 21.2.4 and earlier and 22.1.1 and earlier. It is a Memory Corruption vulnerability in the parser for specially crafted files. An unauthenticated attacker could achieve arbitrary code execution in the context of the current user, and exploitation requires use...

CVE-2021-36005

Summary of CVE-2021-36005 : Adobe Photoshop versions 21.2.9 and earlier, and 22.4.2 and earlier, are affected by a stack overflow caused by insecure handling of a crafted PSD file. The issue could lead to arbitrary code execution in the context of the current user. Exploitation requires user inte...