NULL Pointer Dereference Vulnerability in Adobe InDesign

CVE-2025-27179

What is CVE-2025-27179?

Adobe InDesign Desktop versions ID20.1 and ID19.5.2, as well as earlier versions, contain a NULL Pointer Dereference vulnerability. This flaw could allow an attacker to cause a denial-of-service condition by crashing the application. To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted malicious file, triggering the error and leading to an application crash. It is critical for users to ensure their software is up-to-date and to exercise caution when handling unknown files.

References