Heap-Based Buffer Overflow in Adobe InDesign Desktop
CVE-2025-43591

7.8HIGH

Key Information:

Vendor

Adobe
Status
Indesign Desktop
Vendor
CVE Published:
8 July 2025

What is CVE-2025-43591?

Adobe InDesign Desktop versions 19.5.3 and earlier are vulnerable to a Heap-based Buffer Overflow that allows arbitrary code execution if a user opens a specially crafted malicious file. This attack vector necessitates user interaction, highlighting the importance of caution when receiving files from untrusted sources. Ensuring that your software is up to date is critical in mitigating this risk.

Affected Version(s)

InDesign Desktop 0 <= 19.5.3

References

https://helpx.adobe.com/security/products/indesign/apsb25...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.