ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
ZDI discloses an Adobe Photoshop PDF JPEG integer overflow that can yield remote code execution.
The Zero Day Initiative published ZDI-26-777, an integer overflow in Adobe Photoshop’s AdobePDFL component during PDF JPEG parsing. A remote attacker can execute arbitrary code if a user opens a malicious file or visits a malicious page. ZDI assigned a CVSS score of 7.8 and CVE-2026-83661. The advisory does not state that the flaw is being exploited.
46