CVE-2023-29315

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jul 12, 2023
Updated: Jul 19, 2023
CWE ID 125

Summary

CVE-2023-29315 is a newly disclosed vulnerability that affects Adobe InDesign versions ID18.3 and ID17.4.1. This out-of-bounds read issue allows an attacker to read sensitive memory content beyond allocated bounds, potentially bypassing Address Space Layout Randomization (ASLR) mitigations. Users are at risk if they open a maliciously crafted file, making this a significant security concern. Exploitation of this vulnerability could lead to the disclosure of confidential information. Users are encouraged to update their Adobe InDesign software to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share