Adobe Lightroom Classic contains an integer overflow or wraparound vulnerability (CWE-190) that may lead to arbitrary code execution in the context of the current user. Successful exploitation requires that a victim opens a specially crafted malicious file. The CVSS 3.1 base score is 7.8, reflecting a high impact on confidentiality, integrity, and availability, with low attack complexity but requiring user interaction and no privileges needed prior to exploitation. No vendor advisory or patch information is provided at this time.

If exploited, this vulnerability could allow an attacker to execute arbitrary code with the same privileges as the current user, potentially leading to full compromise of the user's environment. The attack requires user interaction (opening a malicious file), which limits remote exploitation but still poses a significant risk to affected users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening files from untrusted sources and follow Adobe's security recommendations.