NULL Pointer Dereference Vulnerability in Adobe InDesign
CVE-2025-21125
5.5MEDIUM
Summary
Adobe InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that may allow an attacker to cause a denial-of-service condition. If a user opens a specifically crafted malicious file, the application may crash, disrupting workflows and causing potential data loss. The exploitation of this vulnerability necessitates user interaction, highlighting the importance of cautious file handling in maintaining application security.
Affected Version(s)
InDesign Desktop 0
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved