Executive brief
Adobe Bridge is a digital asset management application used by creative professionals to organize, browse, and manage media files. A heap-based buffer overflow vulnerability allows an attacker to execute arbitrary code on a user's computer by crafting a malicious file that, when opened in Bridge, triggers memory corruption. Exploitation requires the user to open the malicious file, making this a file-based attack vector.
Technical details
This vulnerability is a heap-based buffer overflow in Adobe Bridge that occurs during file processing. The flaw exists in versions 15.1.2, 16.0, and earlier. An attacker can craft a specially malformed file that, when opened by a user in Bridge, overwrites heap memory and leads to arbitrary code execution in the context of the current user. The attack requires user interaction (opening a malicious file) and is not currently known to be exploited in the wild. A fix is expected in an upcoming security update.
Affected products
- Adobe Bridge 15.1.2, 16.0 and earlier
Timeline
- 2026-01-13: disclosed