Adobe Photoshop Desktop is vulnerable to a heap-based buffer overflow that can lead to arbitrary code execution when a malicious file is opened. While the exact internal mechanism is not detailed in the advisory, it is inferred that the overflow occurs during image file parsing, enabling an attacker to corrupt the heap and gain control over program flow. Once exploited, the attacker runs code with the same privileges as the affected user, potentially compromising the entire workstation.

The vulnerability affects Adobe Photoshop Desktop; specific affected versions are not disclosed by the vendor. All installations that have not applied the latest security fix are susceptible.

The CVSS score of 7.8 indicates high severity, while the EPSS score of less than 1% suggests a low probability of widespread exploitation at present. The vulnerability is not listed in the CISA KEV catalog, further indicating limited public exploitation. The particular attack vector requires user interaction—an attacker must supply a crafted Photoshop file that the victim opens. In the absence of a patch, the risk remains significant for environments where users regularly accept or automatically open external image files.