Skip to content
OpenAdvisories
Medium WID-SEC-2025-0338 13 CVEs

Adobe Creative Cloud Applikationen: Mehrere Schwachstellen

Published Feb 11, 2025 · Updated Feb 11, 2025 · de-DE

Vendor: Adobe Product: Creative Cloud Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Adobe Creative Cloud ausnutzen, um beliebigen Programmcode auszuführen und einen Denial-of-Service-Zustand zu verursachen.

Product

Adobe Creative Cloud umfasst Anwendungen und Dienste für Video, Design, Fotografie und Web.

Vulnerabilities 13

  • High 7.8
    CVE-2025-21121

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-21123

    InDesign Desktop | Heap-based Buffer Overflow (CWE-122)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a …

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-21156

    InCopy | Integer Underflow (Wrap or Wraparound) (CWE-191)

    InCopy versions 20.0, 19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a v…

    Adobe InCopy
  • High 7.8
    CVE-2025-21157

    InDesign Desktop | Out-of-bounds Write (CWE-787)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-21158

    InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

    Adobe InDesign Desktop
  • High 7.8
    CVE-2025-21159

    Illustrator | Use After Free (CWE-416)

    Illustrator versions 29.1, 28.7.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…

    Adobe Illustrator
  • High 7.8
    CVE-2025-21160

    Illustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)

    Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in tha…

    Adobe Illustrator
  • High 7.8
    CVE-2025-21161

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    Substance3D - Designer versions 14.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus…

    Adobe Substance3D - Designer
  • High 7.8
    CVE-2025-21163

    Illustrator | Stack-based Buffer Overflow (CWE-121)

    Illustrator versions 29.1, 28.7.3 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim m…

    Adobe Illustrator
  • Medium 5.5
    CVE-2025-21124

    InDesign Desktop | Out-of-bounds Read (CWE-125)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of thi…

    Adobe InDesign Desktop
  • Medium 5.5
    CVE-2025-21125

    InDesign Desktop | NULL Pointer Dereference (CWE-476)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-o…

    Adobe InDesign Desktop
  • Medium 5.5
    CVE-2025-21126

    InDesign Desktop | Improper Input Validation (CWE-20)

    InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, …

    Adobe InDesign Desktop
  • Medium 5.5
    CVE-2025-21155

    Substance3D - Stager | NULL Pointer Dereference (CWE-476)

    Substance3D - Stager versions 3.1.0 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-servi…

    Adobe Substance3D - Stager

Revision history

  1. #1

    Initiale Fassung

References