An out‑of‑bounds write (CWE‑787) in Adobe Photoshop Desktop allows an attacker to overwrite memory when processing a corrupted file, which can lead to arbitrary code execution in the context of the user who opens that file. The vulnerability is triggered only when a malicious file is opened, so it requires user interaction to be effective, but it does not provide network‑based or privilege‑escalation bypasses beyond the user’s own access rights.

All versions of Adobe Photoshop Desktop are affected. No specific version range was supplied, so any installation of Photoshop Desktop should be considered vulnerable until confirmed patched.

The vulnerability has a CVSS score of 7.8, indicating high severity, and an EPSS score of less than 1 %, showing that it is currently not a widely observed exploit. It is not listed in the CISA KEV catalog. Because exploitation requires the user to open a malicious file, the risk depends on user awareness and file source. An attacker who successfully deceives a user can run arbitrary code with the user’s local privileges, potentially compromising the host system.