Read the docs
TI-2017-08346 Aliases CVE-2017-11303GHSA-gg68-v3w9-8jpq

Memory corruption in Adobe Photoshop 18.1.1 and earlier versions

Priority MEDIUM 53CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution.

Why it matters now

EPSS 0.0806 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Adobe Photoshop 18.1.1 (2017.1.1) and earlier versionsAdobe Photoshop 18.1.1 (2017.1.1) and earlier versions—No fix listedCNA
  • Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions Vendor— Affected Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*up to 18.1.1VulnerableAdobe
  • cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:* Versions up to 18.1.1 Vulnerable ·Adobe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-11303
  2. 2026-10-03 Alias added: GHSA-gg68-v3w9-8jpq

References

Advisory 1

  • TI-2007-02283 Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3… CVSS 2.0HIGH 9.3
  • TI-2007-02162 Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9… CVSS 2.0HIGH 9.3
  • TI-2011-01854 Adobe Photoshop 12.0 in Creative Suite 5 (CS5) and 12.1 in Creative Suite 5.1 (CS5.1)… CVSS 2.0HIGH 9.3
  • TI-2008-01693 Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects… CVSS 2.0HIGH 9.3
  • TI-2012-01800 Use-after-free vulnerability in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x… CVSS 2.0HIGH 9.3
  • TI-2010-02988 Untrusted search path vulnerability in Adobe PhotoShop CS2 through CS5 allows local… CVSS 2.0HIGH 9.3
See all 117 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences