CVE-2022-28854: Adobe InDesign 2022 Out-of-Bound Read Memory leak
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-28854?
CVE-2022-28854 is an out-of-bounds read vulnerability in Adobe InDesign versions 16.4.2 and earlier, as well as 17.3 and earlier.
How does CVE-2022-28854 affect Adobe InDesign?
CVE-2022-28854 affects Adobe InDesign versions 16.4.2 and earlier, as well as 17.3 and earlier, potentially leading to disclosure of sensitive memory and bypassing mitigations such as ASLR.
What could an attacker do with CVE-2022-28854?
An attacker could leverage CVE-2022-28854 to read sensitive memory and potentially bypass mitigations like ASLR.
Which software versions are vulnerable to CVE-2022-28854?
Adobe InDesign versions 16.4.2 and earlier, as well as 17.3 and earlier, are vulnerable to CVE-2022-28854.
How can I fix CVE-2022-28854?
Update Adobe InDesign to a version that is not affected by CVE-2022-28854.