Out-of-bounds Write Vulnerability in InDesign Desktop by Adobe

CVE-2025-54208

What is CVE-2025-54208?

Adobe InDesign Desktop versions 20.4, 19.5.4, and earlier are susceptible to a vulnerability that allows an out-of-bounds write, potentially enabling arbitrary code execution within the context of the current user. Successful exploitation requires user interaction, specifically the opening of a carefully crafted malicious file. This security flaw highlights the need for users to be vigilant against potential threats when handling files from untrusted sources.

References