Bridge is vulnerable to an out‑of‑bounds write that could lead to arbitrary code execution. The flaw allows writing data beyond the bounds of a buffer, potentially corrupting memory and enabling an attacker to inject executable code. The vulnerability is described as an exploitation path that could be leveraged only when the victim opens a specially crafted file, indicating it requires user interaction.

Adobe Bridge is affected. No version information was provided, so the scope likely covers all installations of the product pending a vendor‑issued fix. The vendor is Adobe, and users of Adobe Bridge should check for updates or advisories on Adobe’s security portal.

The CVSS score of 7.8 indicates a high severity, while the EPSS score is < 1%, indicating a very low but non‑zero likelihood of exploitation, and the vulnerability is not listed in CISA KEV. Exploitation requires the victim to open a malicious file, so the attack vector is user‑interaction file execution. In a scenario where an attacker can supply a file to a user, the risk of exploitation is significant, affecting confidentiality, integrity, and availability for the affected user’s system.