CVE-2024-45109: 
Adobe Photoshop vulnerability analysis and mitigation

Adobe Photoshop Desktop versions 24.7.4, 25.11 and earlier are affected by an out-of-bounds write vulnerability identified as CVE-2024-45109. The vulnerability was disclosed on September 13, 2024, and was discovered through Adobe's public bug bounty program with HackerOne (Adobe Advisory, NVD).

The vulnerability is classified as an out-of-bounds write vulnerability (CWE-787). It has received a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability affects both Windows and macOS operating systems (NVD).

If successfully exploited, this vulnerability could result in arbitrary code execution in the context of the current user. The severity of the impact depends on the user's privileges - users with administrative rights would be more severely impacted than those with restricted privileges (CIS Advisory).

Adobe has released security updates to address this vulnerability. Users should update their Photoshop installations to versions newer than 24.7.4 for the 2023 release or versions newer than 25.11 for the 2024 release (Adobe Advisory).