Photoshop Desktop is vulnerable to an out‑of‑bounds write that is triggered when the program parses a maliciously crafted file. The flaw allows an attacker to corrupt memory during file handling, which can lead to execution of arbitrary code within the context of the user who opens the file. This weakness corresponds to CWE‑787 and can compromise the confidentiality, integrity, or availability of data on the victim system.

Adobe Photoshop is listed as the affected product. No specific release or version information is supplied, so any current installation of Photoshop Desktop that has not been patched with the Adobe fix is potentially vulnerable.

The CVSS score of 7.8 signals a high severity, yet the EPSS score of less than 1% indicates that exploitation is currently unlikely. The vulnerability requires user interaction, as a victim must open a malicious file. Adobe has not reported the flaw as part of the CISA KEV catalogue, so no widespread exploitation has been documented, but the risk remains significant for users who open unknown files.