Vulnerability Description
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Media Encoder | <= 14.3.2 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://helpx.adobe.com/security/products/media-encoder/apsb20-57.htmlVendor Advisory
- https://helpx.adobe.com/security/products/media-encoder/apsb20-57.htmlVendor Advisory
FAQ
What is CVE-2020-9739?
CVE-2020-9739 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or ...
How severe is CVE-2020-9739?
CVE-2020-9739 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9739?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Media Encoder, Microsoft Windows.