Skip to content
OpenAdvisories
High · 8.6 CVE-2021-21006 EUVD-2021-8415GHSA-v4j4-xc7c-cpxx

Heap buffer overflow when handling crafted font file could lead to arbitrary code execution

Published Jan 13, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

VendorProductAffectedFixed
Adobe Photoshop 22.1 and earlier —

References