Skip to content
OpenAdvisories
High NCSC-2025-0229 6 CVEs

Kwetsbaarheden verholpen in Adobe InDesign Desktop

Published Jul 11, 2025 · Updated Jul 11, 2025 · nl

Vendor: Adobe Product: InDesign

Summary

Adobe heeft kwetsbaarheden verholpen in Adobe InDesign Desktop (Versies 19.5.3 en eerder).

Details

Interpretaties
De kwetsbaarheden bevinden zich in de wijze waarop Adobe InDesign Desktop bestanden verwerkt. Wanneer een gebruiker een kwaadwillig vervaardigd bestand opent, kan dit leiden tot willekeurige code-executie. Aanvallers kunnen deze kwetsbaarheden misbruiken om ongeautoriseerde commando's op het getroffen systeem uit te voeren.

Oplossingen
Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 6

  • High 7.8
    CVE-2025-43591

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-43592

    InDesign Desktop | Access of Uninitialized Pointer (CWE-824)

    InDesign Desktop versions 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-43594

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions 19.5.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-47103

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-47134

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-47136

    InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

    InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that…

    Adobe InDesign Desktop

Revision history

  1. #1.0.0

    Initiele versie

References