Adobe InDesign CC 2023 Memory Corruption Vulnerability VIII.

CVE-2023-44346

Summary

An out-of-bounds read vulnerability has been identified in Adobe InDesign versions ID18.5 and ID17.4.2, along with earlier versions. This security issue allows unauthorized access to sensitive memory, potentially enabling malicious actors to bypass security mechanisms such as ASLR (Address Space Layout Randomization). Exploiting this vulnerability necessitates user interaction, as the victim must open a specially crafted file designed to trigger the flaw. Addressing this issue is essential for protecting sensitive information and maintaining robust security practices.

References