CVE-2020-9675: 
Adobe Bridge vulnerability analysis and mitigation

Adobe Bridge versions 10.0.3 and earlier were found to contain an out-of-bounds read vulnerability (CVE-2020-9675). The vulnerability was discovered and reported on April 8, 2020, and was publicly disclosed on July 22, 2020. This security flaw specifically affects the processing of 3GP files in Adobe Bridge (ZDI Advisory, Adobe Advisory).

The vulnerability is classified as an out-of-bounds read issue (CWE-125) that occurs during the processing of 3GP files. The flaw stems from inadequate validation of user-supplied data, which can result in a read operation past the end of an allocated structure. The vulnerability received a CVSS v3.1 base score of 7.8 (High), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

Successful exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process. The severity of this issue is rated as Critical due to its potential impact on system security (Adobe Advisory, ZDI Advisory).

The vulnerability requires user interaction to be exploited, specifically the target must visit a malicious page or open a malicious file. At the time of disclosure, there were no known exploits in the wild (ZDI Advisory).

Adobe has released version 10.1.1 of Bridge to address this vulnerability. Users running version 10.0.3 or earlier are advised to update to the latest version (Adobe Advisory).