Adobe InDesign Integer Underflow Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe InDesign Desktop versions 19.5.3 and earlier. This issue arises from an integer underflow vulnerability that requires user interaction for exploitation, as a victim must open a malicious file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current user.

Remediation

Users can update to Adobe InDesign version 19.5.4 via the Creative Cloud desktop app updater or through the InDesign Help menu. For managed environments, IT administrators can use the Creative Cloud Packager to create deployment packages.