CVE-2025-21123
published 2025-02-11CVE-2025-21123: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | indesign | < 19.5.2 | 19.5.2 |
| adobe | indesign | — | — |
| adobe | indesign_desktop | <= ID19.5.1 | — |