Out-of-Bounds Read Vulnerability in Adobe InDesign Desktop

CVE-2024-49510

Summary

Adobe InDesign Desktop versions ID18.5.3, ID19.5, and earlier are vulnerable to an out-of-bounds read issue, which potentially exposes sensitive memory data. This weakness allows attackers to circumvent security mechanisms like Address Space Layout Randomization (ASLR). Exploitation is contingent upon user interaction, requiring the victim to open a specially crafted malicious file designed to trigger the vulnerability.

References