CVE-2024-49546

Summary

CVE-2024-49546 is a newly disclosed vulnerability that impacts Adobe InDesign Desktop versions ID19.5, ID18.5.4, and older. This issue is an out-of-bounds read vulnerability, which enables an attacker to access sensitive memory content. By exploiting this flaw, an adversary can bypass Address Space Layout Randomization (ASLR), potentially gaining deeper access to a victim's system. However, it's important to note that this vulnerability requires user interaction, meaning the target must open a maliciously crafted file in order for the exploit to take effect.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.