Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-9728

Out-of-bounds memory access could lead to code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

A memory corruption vulnerability exists in InDesign 15.1.1 (and earlier versions). Insecure handling of a malicious indd file could be abused to cause an out-of-bounds memory access, potentially resulting in code execution in the context of the current user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe InDesign

  • unspecified to ≤ 15.1.1affected
  • unspecified to ≤ Noneaffected

References