Out-of-Bounds Read Vulnerability in Adobe InDesign Desktop Products

CVE-2024-53951

Summary

Adobe InDesign Desktop versions ID19.5, ID18.5.4, and earlier versions are affected by a vulnerability that allows an attacker to read sensitive data from memory through an out-of-bounds read condition. This exploitation requires the victim to open a specially crafted malicious file, which can lead to the disclosure of sensitive information and potentially allow the attacker to bypass certain memory protection measures, such as address space layout randomization (ASLR). Users are advised to update to the latest versions to mitigate risks.

References