Photoshop Desktop is vulnerable to a NULL Pointer Dereference that can cause a crash, resulting in application denial‑of‑service. The flaw is triggered when the program processes a malicious file and dereferences a null pointer, causing the application to terminate. The vulnerability is classified as CWE‑476 and requires user interaction; a victim must open a malicious file for the denial‑of‑service to occur.

Adobe Photoshop desktop is impacted. No specific version numbers are listed in the advisory, so all released Photoshop desktop installations are considered vulnerable until a patch is applied. The advisory notes that the issue is present in the generic desktop distribution.

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score of less than 1% implies a low probability of widespread exploitation. The vulnerability is not currently listed in the CISA KEV catalog. Exploitation requires user interaction: a victim must open a malicious file. Because the attack requires a local user action, the risk to unattended or network‑only deployments is limited, but any user who receives a malicious document can trigger the denial‑of‑service.