Out-of-Bounds Read Issue in Adobe InDesign Desktop Products

CVE-2026-27284

What is CVE-2026-27284?

Adobe InDesign Desktop versions 20.5.2 and 21.2, along with earlier versions, have a security flaw that allows an out-of-bounds read during the parsing of specially crafted files. This vulnerability could enable an attacker to read data beyond the allocated memory boundaries, potentially leading to unauthorized code execution in the context of the user who opens the malicious file. User action is required for exploitation, making awareness and caution during file handling crucial for preventing such attacks.

References