CVE-2020-8882

The record

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the PSD files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9811.

Affected packages

Related vulnerabilities

• CVE-2026-115327 libyang through 6.4.13 contains an uninitialized pointer free vulnerability in… CWE-824
• CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
• CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
• CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
• CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
• CVE-2026-16409 Invalid pointer in the Security: PSM component. CWE-824
• CVE-2026-16353 Invalid pointer in the DOM: Bindings (WebIDL) component. CWE-824
• CVE-2026-47908 Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized… CWE-824