A flaw in Adobe Photoshop Desktop allows an integer overflow when processing image data, which can lead to arbitrary code execution in the context of the user who opens a crafted file. The exploitation would compromise the confidentiality, integrity, and availability of that user’s data and system, potentially allowing the execution of malicious instructions that run with the privileges of that session.

Adobe Photoshop Desktop – any desktop installation of Photoshop. No specific version is listed, so all users of Photoshop at the time of the advisory should assume the vulnerability applies until they check the update status.

The CVSS score of 7.8 indicates a moderate‑to‑high severity. EPSS is reported as less than 1%, suggesting a very low probability of exploitation. The vulnerability is not in the CISA KEV catalog. Exploitation requires a victim to open a malicious file, so the attack vector is user interaction and not remote. An attacker would need to entice a user to launch a specially crafted Photoshop document to succeed.