Integer Underflow Vulnerability in Adobe Bridge Product
CVE-2025-43546

7.8HIGH

Key Information:

Vendor

Adobe
Status
Bridge
Vendor
CVE Published:
13 May 2025

What is CVE-2025-43546?

Adobe Bridge versions 15.0.3, 14.1.6, and earlier are affected by an Integer Underflow vulnerability. This flaw could enable arbitrary code execution within the context of the current user. Exploiting this vulnerability requires user interaction, as a victim must open a specially crafted malicious file. Users are advised to update to the latest version to mitigate this security risk.

Affected Version(s)

Bridge 0 <= 14.1.6

References

https://helpx.adobe.com/security/products/bridge/apsb25-4...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-43546 : Integer Underflow Vulnerability in Adobe Bridge Product