Bridge contains an out-of-bounds read vulnerability (CWE-125) that can cause disclosure of sensitive memory when a user opens a malicious file. The flaw allows an attacker to read data beyond the intended buffer boundaries, potentially revealing confidential information.

The vulnerability affects Adobe Bridge products from Adobe. No specific version range is disclosed, so all installations of Adobe Bridge that have not applied a formal update may be susceptible.

The CVSS score of 5.5 indicates moderate severity. The EPSS score of less than 1% shows a very low probability of exploitation in the wild. Adobe has not listed this CVE in the CISA KEV catalog. Exploitation requires user interaction: the victim must open a specially crafted file, so the attack vector is user-dependent and not purely remote.