Analysis Summary

CVE-2025-30326 CVSS:7.8

Photoshop Desktop versions are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30325 CVSS:7.8

Photoshop Desktop versions are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2025-30324 CVSS:7.8

Photoshop Desktop versions are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Impact

• Code Execution

Indicators of Compromise

CVE

• CVE-2025-30326

• CVE-2025-30325

• CVE-2025-30324

Affected Vendors

Affected Products

• Photoshop 2025 - 26.5
• Photoshop 2024 - 25.12.2

Remediation

Refer to Adobe Security Advisory for patch, upgrade or suggested workaround information.

Adobe Security Advisory