CVE-2024-49549

Summary

CVE-2024-49549 is a newly disclosed vulnerability affecting Adobe InDesign Desktop versions ID19.5, ID18.5.4, and older. This issue involves an out-of-bounds read vulnerability, which could potentially result in the disclosure of sensitive memory. An attacker could exploit this flaw to bypass mitigations like Address Space Layout Randomization (ASLR). Notably, exploitation of this vulnerability necessitates user interaction, meaning a victim must open a maliciously crafted file for the attack to be successful.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.