Adobe InDesign Desktop Use-After-Free Vulnerability Allowing Memory Disclosure and ASLR Bypass

A use-after-free vulnerability has been identified in Adobe InDesign Desktop versions ID20.2 and ID19.5.3 and earlier. This vulnerability could lead to the disclosure of sensitive memory. An attacker could exploit this issue to bypass Address Space Layout Randomization (ASLR) mitigations. Exploitation requires user interaction, as the victim must open a malicious file.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive memory, potentially allowing an attacker to access confidential information or manipulate program behavior.