Photoshop Desktop suffers from an integer overflow or wraparound condition in its file handling logic that, if triggered, can allow an attacker to execute arbitrary code while the application is running. The flaw arises when the program processes maliciously crafted numeric values from an input file, leading to unsafe memory accesses or code execution. The primary consequence is that the attacker gains full execution capabilities within the privileges of the user who opens the file.

Adobe Photoshop installations are affected, including all variants listed under Adobe:Photoshop. No specific version range is provided in the advisory, so any Photoshop deployment that has not applied the latest security patches is potentially vulnerable.

The CVSS score of 7.8 classifies the vulnerability as high severity. The EPSS score of less than 1 percent indicates a very low probability of widespread exploitation, and the vulnerability is not included in the CISA KEV catalog. The crash condition requires user interaction because the attacker must supply a malicious file that the victim opens, so the attack mode is user‑initiated and file‑based. Because the flaw directly leads to arbitrary code execution, any compromise would be severe if exploited.