CVE-2025-47104

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

16 Jun 2025, 21:31

Type Values Removed Values Added
First Time Microsoft
Adobe
Microsoft windows
Adobe indesign
Apple
Apple macos
CPE cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
References () https://helpx.adobe.com/security/products/indesign/apsb25-53.html - () https://helpx.adobe.com/security/products/indesign/apsb25-53.html - Vendor Advisory

10 Jun 2025, 17:23

Type Values Removed Values Added
New CVE

Information

Published : 2025-06-10 17:23

Updated : 2025-06-16 21:31


NVD link : CVE-2025-47104

Mitre link : CVE-2025-47104


JSON object : View

Products Affected

microsoft

  • windows

apple

  • macos

adobe

  • indesign
CWE
CWE-125

Out-of-bounds Read