Unrated

Arbitrary Code Execution Buffer Overflow in Adobe Photoshop

IdentifiersCVE-2021-28582CWE-788

CVE-2021-28582 is a critical buffer overflow vulnerability in Adobe Photoshop for Windows and macOS. According to the provided Adobe advisory context, the flaw can be triggered in affected Photoshop versions and may result in arbitrary code execution in the context of the current user. The supplied material identifies the weakness as CWE-788 and indicates that Adobe addressed it in Photoshop 2020 version 21.2.8 / 21.2.9 and Photoshop 2021 version 22.4.0 / 22.4.2, depending on advisory wording. No vulnerable function or parsing component is specified in the provided content.

For your environment

Are you exposed to this one?

Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.

Start free trial

ANALYST BRIEF

Impact, mitigation & remediation

What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.

Impact

What an attacker gets, and what they’ve been doing with it.

Successful exploitation could allow an attacker to execute arbitrary code as the current user. In practical terms, this can lead to compromise of the affected workstation, including installation of malware, access to user-accessible data, and further post-exploitation activity subject to the privileges of the logged-in user.

Mitigation

If you can’t patch tonight, do this now.

Update Photoshop to the latest fixed version via the Creative Cloud desktop application or, in enterprise environments, deploy the update through Adobe Admin Console. If immediate patching is not possible, reduce exposure by limiting opening of untrusted files and restricting use of Photoshop on systems handling untrusted content, though no vendor-specified workaround beyond updating is provided in the supplied content.

Remediation

Patch, then assume compromise.

Apply Adobe's security updates for Photoshop. The provided advisory states to upgrade Photoshop 2020 to version 21.2.9 or later and Photoshop 2021 to version 22.4.2 or later. The mention context also states the issue was resolved by Photoshop 2020 version 21.2.8 and Photoshop 2021 version 22.4.0; because the supplied sources are inconsistent on exact fixed builds, the safest remediation is to update to the latest available vendor-supported release, at minimum the later versions cited by the advisory.

PUBLIC EXPLOITS

Exploits

No public exploits tracked yet. Mallory keeps watching.

VALID 0 / 0 TOTALView more in app

No public exploit code observed for this vulnerability.

ACTIVITY FEED

Recent activity

1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

1 SOURCESView more in app

adobe-security-bulletinsNews

Jun 8, 2021

Adobe Security Bulletin

A critical buffer overflow vulnerability in Adobe Photoshop that could allow arbitrary code execution in the context of the current user.

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which adversaries are exploiting it right now, which detections to deploy, and what to do tonight.

Start free trial

Exposure mapping

Query your assets running an affected version, and investigate the blast radius.

Threat actor evidence

Every observed campaign linking this CVE to a named adversary.

Associated malware

Malware families riding this exploit, with evidence and IOCs.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

Vendor-by-vendor mapping

Cross-references every affected SKU, including bundled OEM variants.

Social activity