Out-of-Bounds Write Vulnerability in InCopy by Adobe

CVE-2025-54218

What is CVE-2025-54218?

InCopy versions 20.4, 19.5.4, and earlier are susceptible to an out-of-bounds write vulnerability. This flaw could allow for arbitrary code execution within the context of the affected user's environment, thereby posing a significant security risk. Exploitation of this vulnerability necessitates user interaction, as it requires the victim to open a specially crafted malicious file. Adobe has released guidance on this security issue, highlighting the importance of patching vulnerable versions to mitigate potential threats.

References