CVE-2020-9739: adobe media_encoder Out-of-bounds Read
Vulnerability summary
CVE-2020-9739 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in adobe media_encoder. EPSS estimates a 2.24% chance of exploitation in the next 30 days, higher than 82.6% of scored vulnerabilities.
Timeline
- 18-09-2020PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Adobe Media Encoder version 14.3.2 (and earlier versions) has an out-of-bounds read vulnerability that could be exploited to read past the end of an allocated buffer, possibly resulting in a crash or disclosure of sensitive information from other memory locations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
CVSS metrics
3 scores · 2 sources · 2 versions- CVE.orgCNA6.1MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:LDiffers
EPSS trend
Probability
2.24%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.24% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Adobe1 product
- media_encoder≥ unspecified, ≤ 14.3.2 | ≥ unspecified, ≤ None | ≤ 14.3.2
1 vendor · 1 product