CVE-2025-61819CWE-122CWE-787

CVE-2025-61819

High · published November 11, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

⚡ A simple click could unleash chaos! Photoshop Desktop versions 26.8.1 and earlier are vulnerable to a Heap-based Buffer Overflow, inviting potential mayhem if you open a malicious file. 🔥 This vulnerability is like a food critic who unknowingly bites into a dish prepared with spoiled ingredients — one wrong choice and it could lead to a stomach-churning experience. Just as you wouldn’t want that dish served at your favorite restaurant, you don’t want to let harmful files into your Photoshop! If an attacker exploits this vulnerability, they could execute arbitrary code within the context of the current user. In simpler terms, this means they could access sensitive data or manipulate your files, which could be absolutely devastating.

Put simply

This vulnerability is like a food critic who unknowingly bites into a dish prepared with spoiled ingredients — one wrong choice and it could lead to a stomach-churning experience. Just as you wouldn’t want that dish served at your favorite restaurant, you don’t want to let harmful files into your Photoshop! The Heap-based Buffer Overflow occurs when Photoshop fails to properly manage memory, allowing attackers to run their own code when a victim opens a crafted file. This exploit requires user interaction, making it sneaky but dangerous.

What to do

If an attacker exploits this vulnerability, they could execute arbitrary code within the context of the current user. In simpler terms, this means they could access sensitive data or manipulate your files, which could be absolutely devastating. To protect yourself, update Photoshop to version 26.8.2 or later immediately. Additionally, be cautious about the files you open, especially from untrusted sources. Keeping your software up-to-date is your best defense! You've got this! Follow these steps and you’ll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-11T23:15Z
Affected products (1)
ProductVersionsFixed in
adobe/photoshop< 26.926.9
References (1)
EPSS history
Timeline
  • 11 NOV 17:11Z
    Photoshop Desktop | Heap-based Buffer Overflow (CWE-122)
    cvelistv5