Adobe InDesign Desktop Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

An out-of-bounds read vulnerability has been identified in Adobe InDesign Desktop versions ID20.0, ID19.5.1 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker could exploit this issue to bypass mitigations such as Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive memory, potentially allowing an attacker to bypass ASLR mitigations.