CVE-2021-42735— Adobe Photoshop Memory Corruption could lead to Arbitrary code execution
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-42735
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Adobe Photoshop Memory Corruption could lead to Arbitrary code execution
Source: NVD (National Vulnerability Database)
Vulnerability Description
Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在缓冲区结束位置之后访问内存
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Photoshop 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Photoshop是美国奥多比（Adobe）公司的一套图片处理软件。该软件主要用于处理图片。 Adobe Photoshop存在缓冲区错误漏洞，该漏洞漏洞的存在是由于边界条件。远程攻击者可利用该漏洞可以创建一个专门制作的文件，诱骗受害者打开它，触发越界读取错误，并读取系统内存中的内容。该漏洞允许远程攻击者可利用该漏洞访问潜在的敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-42735
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-42735
请登录查看更多情报信息。
Same Patch Batch · Adobe · 2022-06-15 · 27 CVEs total
| CVE-2021-40727 | 7.8 HIGH | Adobe InDesign crashes when parsing the TIF file |
| CVE-2021-42732 | 7.8 HIGH | Adobe InDesign crashes when parsing the GIF file |
| CVE-2021-43754 | 7.8 HIGH | Adobe Prelude Corruption could lead to Arbitrary code execution |
| CVE-2021-43756 | 7.8 HIGH | Adobe Media Encoder Memory Corruption Vulnerability could lead to Remote Code Execution |
| CVE-2021-39820 | 7.8 HIGH | Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution |
| CVE-2022-30649 | 7.8 HIGH | Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code execution |
| CVE-2021-43755 | 7.8 HIGH | Adobe After Effects Memory Corruption could lead to Arbitrary Code Execution |
| CVE-2021-40776 | 6.1 MEDIUM | Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability |
| CVE-2022-30669 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30668 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30667 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-30666 | 5.5 MEDIUM | Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak |
| CVE-2022-28850 | 5.5 MEDIUM | Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
| CVE-2022-28847 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28848 | Adobe Bridge PCX Out-of-bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28849 | Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability | |
| CVE-2022-28845 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28846 | Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-28844 | Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability | |
| CVE-2022-30647 | Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Photoshop
- CVE-2023-25908
Adobe Photoshop SVG file Use After Free Arbitrary code execu - CVE-2023-21575
Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code - CVE-2023-21577
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information - CVE-2023-21578
Adobe Photoshop Font Parsing Out-Of-Bounds Read Information - CVE-2023-21576
Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code
Same vendor: Adobe
- CVE-2026-34632
Photoshop Installer | CWE-427: Uncontrolled Search Path Elem - CVE-2026-27297
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27300
Adobe Framemaker | Access of Uninitialized Pointer (CWE-824) - CVE-2026-27296
Adobe Framemaker | Integer Underflow (Wrap or Wraparound) (C - CVE-2026-27290
Adobe Framemaker | Untrusted Search Path (CWE-426)
Same weakness: CWE-788
- CVE-2023-20585
Microsoft Input-Output Memory Management Unit 安全漏洞 - CVE-2026-20052
Cisco Secure Firewall Threat Defense Software Snort 3 Memory - CVE-2026-21316
Audition | Access of Memory Location After End of Buffer (CW - CVE-2025-36581
Dell PowerEdge Platform 14G AMD BIOS 安全漏洞 - CVE-2025-43580
Audition | Access of Memory Location After End of Buffer (CW
V. Comments for CVE-2021-42735
No comments yet