Out-of-Bounds Read Vulnerability in Adobe InDesign Desktop Versions

CVE-2024-41854

What is CVE-2024-41854?

Adobe InDesign Desktop versions ID19.4, ID18.5.2 and earlier are susceptible to an out-of-bounds read vulnerability. This security issue could potentially allow an attacker to gain access to sensitive memory contents. Notably, this vulnerability requires an attacker to trick the user into opening a specially crafted malicious file, enabling the bypass of several security mitigations, including Address Space Layout Randomization (ASLR). Safeguarding against such vulnerabilities is essential to maintain robust security and protect sensitive information.

References