CVE-2020-9713

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Read in Adobe Acrobat and Reader

Publication date: 2026-06-23

Last updated on: 2026-06-26

Assigner: Adobe Systems Incorporated

Description

Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-23

Last Modified

2026-06-26

Generated

2026-07-14

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-12

NVD

CVE-2020-9713

EUVD

EUVD-2020-31257

Affected Vendors & Products

Vendor	Product	Version / Range
adobe	acrobat_dc	20.001.30002
adobe	acrobat_dc	From 17.009.20044 (inc) to 17.011.30171 (inc)
adobe	acrobat_dc	From 15.000.0000 (inc) to 15.006.30523 (inc)
adobe	acrobat_reader	20.001.30002
adobe	acrobat_reader_dc	From 15.000.0000 (inc) to 15.006.30523 (inc)
adobe	acrobat_reader_dc	From 17.009.20044 (inc) to 17.011.30171 (inc)
adobe	acrobat_dc	to 20.009.20074 (inc)
adobe	acrobat_reader_dc	to 20.009.20074 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Mitigation Strategies

To mitigate this vulnerability, ensure that users do not open malicious files that could exploit the out-of-bounds read issue in affected Adobe Acrobat and Reader versions.

Updating Adobe Acrobat and Reader to a version later than 2020.009.20074, 2020.001.30002, 2017.011.30171, or 2015.006.30523, depending on the product version in use, is recommended to address this vulnerability.

Additionally, educating users about the risks of opening files from untrusted sources can help reduce the risk of exploitation.

Executive Summary

This vulnerability is an out-of-bounds read issue found in certain versions of Adobe Acrobat and Reader. It allows an attacker to read memory outside the intended boundaries, which could lead to the disclosure of sensitive information stored in memory.

To exploit this vulnerability, an attacker needs the victim to open a specially crafted malicious file.

Impact Analysis

The impact of this vulnerability is the potential disclosure of sensitive information from the affected system's memory.

Since the vulnerability requires user interaction (opening a malicious file), the risk depends on the likelihood of a user opening such a file.

The CVSS base score of 5.5 indicates a medium severity level, with high confidentiality impact but no impact on integrity or availability.

Compliance Impact

This vulnerability could lead to the disclosure of sensitive information due to an out-of-bounds read in affected Adobe Acrobat and Reader versions. Such unauthorized disclosure of sensitive data may impact compliance with data protection regulations and standards like GDPR and HIPAA, which require safeguarding sensitive information against unauthorized access.

However, specific details on how this vulnerability affects compliance with these standards are not provided in the available information.

Hi! I’m here to help you understand CVE-2020-9713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70