CVE-2022-30658: Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Adobe InDesign versions 17.2.1 (and earlier) and 16.4.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30658?
CVE-2022-30658 is a Heap-based Buffer Overflow vulnerability in Adobe InDesign versions 17.2.1 and earlier, and 16.4.1 and earlier, that could allow arbitrary code execution.
How severe is CVE-2022-30658?
CVE-2022-30658 has a severity score of 7.8 (out of 10), indicating a critical vulnerability.
Which software versions are affected by CVE-2022-30658?
Adobe InDesign versions 17.2.1 and earlier, as well as 16.4.1 and earlier, are affected by CVE-2022-30658.
How can CVE-2022-30658 be exploited?
Exploitation of CVE-2022-30658 requires user interaction, where a victim must open a malicious file.
Is Microsoft Windows vulnerable to CVE-2022-30658?
No, Microsoft Windows is not vulnerable to CVE-2022-30658.