Integer Underflow Vulnerability in Adobe Photoshop Desktop Products
CVE-2025-30324

7.8HIGH

Key Information:

Vendor

Adobe

Vendor
CVE Published:
13 May 2025

What is CVE-2025-30324?

Adobe Photoshop Desktop versions 26.5 and 25.12.2 and earlier are susceptible to an Integer Underflow vulnerability that can allow attackers to execute arbitrary code within the context of the current user. This exploitation requires direct user interaction, as it necessitates that the victim opens a specially crafted malicious file. If successful, this vulnerability could lead to unauthorized operations on the affected system.

Affected Version(s)

Photoshop Desktop 0 <= 25.12.2

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.