Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

跨界内存读

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop是美国奥多比（Adobe）公司的一套图片处理软件。该软件主要用于处理图片。 Adobe Photoshop 22.5.6版本及之前版本、23.2.2版本及之前版本存在缓冲区错误漏洞，该漏洞源于敏感内存泄露。攻击者利用该漏洞绕过缓解措施，例如ASLR。

N/A

N/A