CVE-2023-44330

Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

23 Feb 2024, 19:39

Type Values Removed Values Added
CWE CWE-125

05 Dec 2023, 09:15

Type Values Removed Values Added
Summary Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8

20 Nov 2023, 19:16

Type Values Removed Values Added
CWE CWE-125
References () https://helpx.adobe.com/security/products/photoshop/apsb23-56.html - () https://helpx.adobe.com/security/products/photoshop/apsb23-56.html - Vendor Advisory
First Time Adobe
Apple macos
Microsoft
Adobe photoshop
Apple
Microsoft windows
CPE cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

16 Nov 2023, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-16 15:15

Updated : 2024-02-23 19:39


NVD link : CVE-2023-44330

Mitre link : CVE-2023-44330

CVE.ORG link : CVE-2023-44330


JSON object : View

Products Affected

microsoft

  • windows

apple

  • macos

adobe

  • photoshop
CWE
CWE-787

Out-of-bounds Write