CVE-2020-3756

HIGH

Adobe Acrobat <2019.021.20061 - Memory Corruption

Title source: llm

Description

Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .

References (1)

[Patch, Vendor Advisory] https://helpx.adobe.com/security/products/acrobat/apsb20-05.html

Scores

CVSS v3 7.5

EPSS 0.0173

EPSS Percentile 82.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (4)

adobe/acrobat_dc < 15.006.30508

adobe/acrobat_dc < 19.021.20061

adobe/acrobat_reader_dc < 15.006.30508

adobe/acrobat_reader_dc < 19.021.20061

Timeline

Published Feb 13, 2020

Tracked Since Feb 18, 2026