CVE-2022-23203

Summary

Adobe Photoshop versions 22.5.4 (and earlier) and 23.1 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Photoshop.

Affected Software

VendorProductVersion RangeStatus
AdobePhotoshopunspecified <= 23.1affected
AdobePhotoshopunspecified <= 22.5.4affected
AdobePhotoshopunspecified <= Noneaffected

Weaknesses

  • CWE-120: Buffer Overflow (CWE-120)

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References