CVE-2024-20785

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jul 9, 2024
Updated: Aug 2, 2024
CWE ID 122
CWE ID 787

Summary

CVE-2024-20785 is a newly disclosed vulnerability affecting Adobe InDesign Desktop versions ID19.3, ID18.5.2, and older. This issue involves a Heap-based Buffer Overflow, enabling an attacker to execute arbitrary code if a user opens a maliciously crafted file. This vulnerability could potentially lead to significant security risks and requires immediate attention from users to update their software or apply relevant patches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Adobe Indesign CS
  • Adobe InDesign

Affected Vendors

  • Adobe