Adobe InDesign Desktop NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

Vulnerability

A NULL pointer dereference vulnerability has been identified in Adobe InDesign Desktop versions ID20.2 and ID19.5.3 and earlier. This vulnerability could be exploited to cause a denial-of-service by crashing the application, which would disrupt service. Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability leads to a crash of the InDesign application, causing a denial-of-service condition.

Added: Jun 10, 2025, 6:28 PM
Updated: Jun 10, 2025, 6:28 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
2.5
exploitability
4.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.