CVE-2021-40709— Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-40709
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Photoshop 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Photoshop是美国奥多比（Adobe）公司的一套图片处理软件。该软件主要用于处理图片。 Adobe Photoshop 存在缓冲区错误漏洞，该漏洞源于该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞触发任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-40709
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-40709
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2021-09-27 · 18 CVEs total
| CVE-2021-39826 | 8.6 HIGH | Adobe Digital Editions Command Execution Vulnerability |
| CVE-2021-39823 | 7.8 HIGH | svg-native-viewer Heap Buffer overflow Vulnerability |
| CVE-2021-39819 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39818 | 7.8 HIGH | Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2021-39825 | 7.8 HIGH | Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execut |
| CVE-2021-28613 | 7.4 HIGH | Adobe Creative Cloud Arbitrary File Overwrite Vulnerability |
| CVE-2021-39827 | 6.5 MEDIUM | Adobe Digital Editions Installer flaw leads to Arbitrary File System Write |
| CVE-2021-40712 | 6.5 MEDIUM | Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS |
| CVE-2021-40714 | 6.1 MEDIUM | Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter |
| CVE-2021-40713 | 5.9 MEDIUM | Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle A |
| CVE-2021-39828 | 5.8 MEDIUM | Adobe Digital Editions Installer flaw leads to Local Privilege Escalation |
| CVE-2021-40711 | 5.4 MEDIUM | Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Executio |
| CVE-2021-40702 | Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-39824 | Adobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40703 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40701 | Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code E | |
| CVE-2021-40700 | Adobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code |
IV. Related Vulnerabilities
Same product: Photoshop
- CVE-2023-25908
Adobe Photoshop SVG file Use After Free Arbitrary code execu - CVE-2023-21577
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information - CVE-2023-21576
Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code - CVE-2023-21578
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information - CVE-2023-21574
Adobe Photoshop Improper Input Validation Remote Code Execut
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
Same weakness: CWE-120
- CVE-2026-8260
D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings - CVE-2026-8137
Totolink X5000R formDdns sub_458E40 buffer overflow - CVE-2026-6691
MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow - CVE-2026-7857
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow - CVE-2026-7856
D-Link DI-8100 Web Management url_member.asp buffer overflow
V. Comments for CVE-2021-40709
No comments yet