InDesign Desktop Vulnerability Could Lead to Sensitive Memory Disclosure

CVE-2024-20766

Summary

Adobe InDesign Desktop versions 18.5.1, 19.2, and earlier are prone to a vulnerability that allows attackers to perform an out-of-bounds read. This flaw can be exploited by an attacker to gain access to sensitive memory information by tricking users into opening a specially crafted malicious file. Users must exercise caution, as exploitation requires their interaction, allowing the bypass of certain security mitigations like Address Space Layout Randomization (ASLR).

References