CVE-2020-9646

EPSS 3.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

16 Jul 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

Adobe · Adobe Media Encoder

References

https://helpx.adobe.com/security/products/media-encoder/apsb20-36.html https://www.zerodayinitiative.com/advisories/ZDI-20-883/