CVE-2025-27171
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 11, 2025
CWE ID 122
Summary
CVE-2025-27171 is a critical vulnerability affecting Adobe InDesign Desktop versions ID20.1, ID19.5.2, and older. This issue involves a heap-based buffer overflow, which can be exploited to execute arbitrary code. The exploitation of this vulnerability necessitates user interaction, requiring victims to open a maliciously crafted file. Successful exploitation can lead to code execution in the context of the current user, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- InDesign Desktop
Affected Vendors
- Adobe