EUVD-2026-56828
GHSA-782g-r34q-q2x5
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File must be opened locally (AV:L); no attacker privileges needed; mandatory UI interaction; full impact to user-level process with no scope change.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 enables arbitrary code execution in the context of the logged-in user when a crafted malicious file is opened. Tagged as Memory Corruption, RCE, and Buffer Overflow by Adobe PSIRT, this is a file-parsing flaw rooted in CWE-787. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, Adobe has released patch version 15.5 via advisory APSB26-94.
Technical ContextAI
CWE-787 (Out-of-Bounds Write) describes a condition where software writes data past the end of an allocated buffer, corrupting adjacent memory. In the context of a media application like Lightroom Classic, this class of flaw typically arises during parsing of image or proprietary catalog file formats - the parser fails to validate data lengths before writing into a fixed-size buffer. When exploited, this memory corruption can be leveraged to overwrite function pointers or return addresses, ultimately redirecting execution to attacker-controlled code. Adobe PSIRT tagged the issue as both Buffer Overflow and Memory Corruption, corroborating the CWE-787 root cause. Affected CPE-derived product scope spans Lightroom Classic releases 15.2, 15.2.1, 15.3, 15.3.1, 15.4, and 15.4.1 - all addressable by upgrading to 15.5.
RemediationAI
The primary remediation is upgrading Adobe Lightroom Classic to version 15.5 or later, as released and documented by Adobe in security bulletin APSB26-94 (https://helpx.adobe.com/security/products/lightroom/apsb26-94.html). Users can apply the update through the Adobe Creative Cloud desktop application. Where immediate patching is not possible, the most effective compensating control is user awareness: instruct users not to open Lightroom project files or image files from untrusted sources, as exploitation requires the victim to open a malicious file. Email and browser gateway policies can be configured to quarantine or flag delivery of file types associated with Lightroom (e.g., .lrcat, .lrtemplate, and raw image formats) from external senders. These controls reduce attack surface but are not substitutes for the patch, as they do not eliminate the underlying vulnerability.
Unsafe deserialization of untrusted data in Adobe Lightroom Classic (versions ≤15.4.1) enables arbitrary code execution
Path traversal in Adobe Lightroom Classic versions up to 15.4.1 allows an attacker to read arbitrary files from the vict
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is achievable by tricking a vict
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is triggered when a victim opens
Out-of-bounds write in Adobe Lightroom Classic allows arbitrary code execution under the context of the logged-in user w
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the security co
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 allows arbitrary code execution in th
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arb
Arbitrary code execution in Adobe Lightroom Desktop 15.1 and earlier via an out-of-bounds write vulnerability when users
Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today