Out-of-Bounds Read Vulnerability in Adobe InDesign Desktop

CVE-2024-49511

Summary

Adobe InDesign Desktop versions ID18.5.3, ID19.5, and earlier have a vulnerability that allows attackers to perform out-of-bounds read operations. This can lead to the unintended disclosure of sensitive information stored in memory. The exploit requires the victim to open a specially crafted file, potentially allowing the attacker to bypass memory protection techniques like ASLR. It is essential for users to be cautious and ensure that they do not open untrusted files to mitigate the risk associated with this vulnerability.

References