CVE-2020-3806

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Mar 25, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-38079.8Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and ear CVE-2020-38085.9Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Succe CVE-2020-38095.5Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information CVE-2020-38105.5Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing special CVE-2020-38117.5qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.CVE-2020-38125.5qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of fi CVE-2020-38258.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13 CVE-2020-38267.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.1 CVE-2020-38277.8A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. Viewing a maliciously CVE-2020-38282.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fi CVE-2020-38297.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15 CVE-2020-38303.3A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed i