Adobe InDesign CC 2023 Memory Corruption Vulnerability III.

CVE-2023-44343

Summary

Adobe InDesign versions ID18.5 and earlier, as well as ID17.4.2 and earlier, are susceptible to an out-of-bounds read vulnerability. This flaw permits an attacker to potentially disclose sensitive memory, undermining common security mitigations such as Address Space Layout Randomization (ASLR). Exploiting this vulnerability necessitates that the user opens a specially crafted file, highlighting the critical importance of maintaining cautious behavior when handling unknown documents.

References