CVE-2020-9711

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read Vulnerability in Adobe Acrobat Reader

Publication date: 2026-06-23

Last updated on: 2026-06-26

Assigner: Adobe Systems Incorporated

Description

Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-23

Last Modified

2026-06-26

Generated

2026-07-14

AI Q&A

2026-06-23

EPSS Evaluated

2026-07-12

NVD

CVE-2020-9711

EUVD

EUVD-2020-31258

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	acrobat_dc	20.001.30002
adobe	acrobat_dc	From 17.009.20044 (inc) to 17.011.30171 (inc)
adobe	acrobat_dc	From 15.000.0000 (inc) to 15.006.30523 (inc)
adobe	acrobat_reader	20.001.30002
adobe	acrobat_reader_dc	From 15.000.0000 (inc) to 15.006.30523 (inc)
adobe	acrobat_reader_dc	From 17.009.20044 (inc) to 17.011.30171 (inc)
adobe	acrobat_dc	to 20.009.20074 (inc)
adobe	acrobat_reader_dc	to 20.009.20074 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Mitigation Strategies

To mitigate this vulnerability, ensure that users do not open malicious files that could exploit the out-of-bounds read issue in affected Acrobat Reader versions.

Update Acrobat Reader to a version later than 2020.009.20074, 2020.001.30002, 2017.011.30171, or 2015.006.30523 to eliminate the vulnerability.

Educate users about the risks of opening files from untrusted sources to reduce the chance of exploitation.

Executive Summary

This vulnerability affects certain versions of Acrobat Reader and is an out-of-bounds read issue. It means that the software reads memory outside the intended boundaries, which can lead to the disclosure of sensitive information stored in memory.

To exploit this vulnerability, an attacker needs the victim to open a specially crafted malicious file, which then triggers the out-of-bounds read.

Impact Analysis

The impact of this vulnerability is the potential disclosure of sensitive information from the affected system's memory. An attacker could gain access to confidential data by exploiting this flaw.

However, exploitation requires user interaction, specifically the victim opening a malicious file.

Hi! I’m here to help you understand CVE-2020-9711. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70