Out-of-Bounds Read Vulnerability in Adobe InDesign Desktop

CVE-2024-49548

What is CVE-2024-49548?

Adobe InDesign Desktop versions ID19.5, ID18.5.4, and earlier are susceptible to an out-of-bounds read vulnerability. This flaw may allow an attacker to disclose sensitive memory information by leveraging user interaction; specifically, the victim must open a manipulated file. Such exploitation could allow bypassing of common security mitigations like Address Space Layout Randomization (ASLR), raising significant security concerns for users. For further details, refer to the official Adobe security bulletin.

References