Stack-Based Buffer Overflow in InDesign by Adobe

CVE-2026-34697

What is CVE-2026-34697?

InDesign Desktop versions 21.3, 20.5.3, and earlier are susceptible to a stack-based buffer overflow vulnerability. This flaw could allow an attacker to execute arbitrary code within the context of the current user. To exploit this vulnerability, an attacker must trick the user into opening a specially crafted malicious file, thereby triggering the overflow and compromising the system's security. Users are advised to remain vigilant and update their software to mitigate potential risks.

References