CVE-2025-24453
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 122
Summary
CVE-2025-24453 is a newly disclosed vulnerability that impacts Adobe InDesign Desktop versions ID20.1, ID19.5.2, and older. This issue is a Heap-based Buffer Overflow vulnerability, meaning it can lead to arbitrary code execution. The flaw can be exploited when a user opens a maliciously crafted file, giving attackers the ability to execute code in the context of the current user. It is essential that users update their InDesign software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- InDesign Desktop
Affected Vendors
- Adobe