Adobe InDesign Desktop Out-of-Bounds Read Vulnerability Allowing Memory Disclosure

A vulnerability allowing out-of-bounds read has been identified in Adobe InDesign Desktop versions ID20.2 and ID19.5.3 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker could exploit this issue to bypass mitigations such as Address Space Layout Randomization (ASLR). Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in unauthorized disclosure of sensitive memory, potentially allowing an attacker to bypass ASLR mitigations.