EUVD-2026-56829
GHSA-2g7r-3x76-4fj4
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-parsing trigger requires a locally-opened file (AV:L), no attacker privileges needed (PR:N), active victim interaction required (UI:R); full C/I/A impact confined to current user session (S:U).
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 allows arbitrary code execution in the context of the logged-in user when a specially crafted file is opened. Adobe's PSIRT reported the issue under advisory APSB26-94, and the ENISA EUVD tracks it as EUVD-2026-56829. No public exploit or CISA KEV listing has been identified at time of analysis, though the CWE-787 memory corruption class combined with a confirmed high C/I/A impact triad warrants prompt patching across all affected release branches.
Technical ContextAI
CWE-787 (Out-of-Bounds Write) describes a condition where software writes data past the boundary of an allocated memory buffer, corrupting adjacent memory structures. In Lightroom Classic, this occurs during file parsing - a well-established attack surface in media-processing applications that consume complex, attacker-controlled file formats such as raw images, catalogs, or proprietary Adobe container formats. The CVSS attack vector of Local (AV:L) reflects that exploitation is triggered through the application's file-handling routines when a locally-present malicious file is opened, consistent with how Adobe typically classifies file-parsing vulnerabilities in desktop creative tools. An out-of-bounds write of sufficient precision can overwrite function pointers, vtable entries, or control-flow metadata, enabling reliable code execution at the privilege level of the current user. The affected versions confirmed by ENISA EUVD-2026-56829 span Lightroom Classic 15.2 through 15.4.1, indicating the vulnerable code is present across multiple consecutive release cycles.
RemediationAI
The primary fix is to upgrade Adobe Lightroom Classic to version 15.5, confirmed as the patched release by Adobe advisory APSB26-94 (https://helpx.adobe.com/security/products/lightroom/apsb26-94.html). Updates are deployable through the Adobe Creative Cloud desktop application or via direct download from Adobe. If immediate patching is not feasible, organizations should instruct users to avoid opening image files, catalog files, or any Lightroom-associated content from untrusted or unverified sources, and to disable automatic file-open behaviors triggered by email attachments or browser downloads. OS-level controls restricting write access to Lightroom Classic's file-ingest directories can reduce passive exposure but do not prevent manual opening of malicious files. Enterprise deployments using Creative Cloud packaging tools should prioritize pushing version 15.5 to all endpoints where Lightroom Classic is installed.
Unsafe deserialization of untrusted data in Adobe Lightroom Classic (versions ≤15.4.1) enables arbitrary code execution
Path traversal in Adobe Lightroom Classic versions up to 15.4.1 allows an attacker to read arbitrary files from the vict
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is achievable by tricking a vict
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 enables arbitrary code execution in t
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is triggered when a victim opens
Out-of-bounds write in Adobe Lightroom Classic allows arbitrary code execution under the context of the logged-in user w
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the security co
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arb
Arbitrary code execution in Adobe Lightroom Desktop 15.1 and earlier via an out-of-bounds write vulnerability when users
Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today