NULL Pointer Dereference Vulnerability in Adobe InDesign

CVE-2025-21125

What is CVE-2025-21125?

Adobe InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that may allow an attacker to cause a denial-of-service condition. If a user opens a specifically crafted malicious file, the application may crash, disrupting workflows and causing potential data loss. The exploitation of this vulnerability necessitates user interaction, highlighting the importance of cautious file handling in maintaining application security.

References