ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI reports an Adobe Photoshop integer overflow, CVE-2026-95636, that can yield remote code execution.
The Zero Day Initiative published ZDI-26-778, an integer-overflow vulnerability in Adobe Photoshop’s DCM pixel-data parser tracked as CVE-2026-95636. A remote attacker could execute arbitrary code, but the target must open a malicious file or visit a malicious page. ZDI assigned a CVSS score of 7.8. The advisory does not report active exploitation.
48