Adobe Bridge is affected by an out‑of‑bounds write flaw that can trigger arbitrary code execution in the current user. The vulnerability stems from a buffer overflow when processing a specially crafted file, allowing an attacker to inject malicious code. The weakness is classified as CWE‑787.

Adobe Bridge from Adobe is impacted by this issue. No specific version range is listed in the advisory, so all current installations of Adobe Bridge should be assumed vulnerable until an official fix is applied.

The vulnerability carries a CVSS score of 7.8, indicating a high potential for impact. The EPSS score is < 1%, and the issue is not included in CISA’s KEV catalog. Exploitation requires user interaction: a victim must open a malicious file, so the attack vector is user‑initiated file handling.