EUVD-2026-56830
GHSA-jhm3-m54p-wpj4
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
File-based local trigger (AV:L), no attacker privileges needed (PR:N), victim must open file (UI:R), full RCE as current user drives C:H/I:H/A:H with unchanged scope.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the security context of the current user through a maliciously crafted file. The flaw, classified under CWE-787 (Memory Corruption / Buffer Overflow), resides in file-parsing logic and requires no elevated privileges on the attacker's side - only that a victim opens the weaponized file. No public exploit code or active exploitation has been confirmed at time of analysis; vendor-released patch 15.5 is available.
Technical ContextAI
CWE-787 describes a write operation that places data beyond the bounds of an allocated memory buffer, a class of flaw common in native-code file parsers handling complex binary or proprietary formats. Lightroom Classic is Adobe's desktop RAW and image editing application, which natively parses a wide range of camera-native formats (CR2, ARW, NEF, DNG, etc.) and layered project files. The parsing routines that handle these formats are written in native code (C/C++), making them susceptible to heap or stack buffer overflows when untrusted file content is not properly validated before being written into fixed-size buffers. A crafted file can overflow such a buffer, corrupting adjacent memory structures - potentially including function pointers or vtable entries - enabling control-flow hijacking and arbitrary code execution. Affected CPE covers Adobe Lightroom Classic versions ≤15.4.1, 15.4, 15.3.1, 15.3, 15.2.1, and 15.2, as reported via EUVD-2026-56830 and Adobe advisory APSB26-94.
RemediationAI
Update Adobe Lightroom Classic to version 15.5, the vendor-confirmed patched release per Adobe advisory APSB26-94 (https://helpx.adobe.com/security/products/lightroom/apsb26-94.html). Updates can be applied via the Adobe Creative Cloud desktop application using the Updates panel. As a compensating control prior to patching, users should avoid opening image or project files received from untrusted or unexpected sources - including email attachments, direct download links, and files from shared cloud storage folders not under organizational control. This control carries the trade-off of reducing workflow flexibility but meaningfully lowers exposure given the UI:R requirement. Disabling Lightroom Classic entirely until patching is complete is the strongest interim control for high-risk environments, though it disrupts creative workflows. No network-level controls are applicable given the local, file-based attack vector.
Unsafe deserialization of untrusted data in Adobe Lightroom Classic (versions ≤15.4.1) enables arbitrary code execution
Path traversal in Adobe Lightroom Classic versions up to 15.4.1 allows an attacker to read arbitrary files from the vict
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is achievable by tricking a vict
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 enables arbitrary code execution in t
Arbitrary code execution in Adobe Lightroom Classic versions up to and including 15.4.1 is triggered when a victim opens
Out-of-bounds write in Adobe Lightroom Classic allows arbitrary code execution under the context of the logged-in user w
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Out-of-bounds write in Adobe Lightroom Classic versions up to 15.4.1 enables arbitrary code execution in the context of
Out-of-bounds write in Adobe Lightroom Classic versions up to and including 15.4.1 allows arbitrary code execution in th
Lightroom Desktop versions 8.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arb
Arbitrary code execution in Adobe Lightroom Desktop 15.1 and earlier via an out-of-bounds write vulnerability when users
Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today