CVE-2022-38413: Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published Sep 16, 2022
·Updated
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
4 affected components
Adobe InDesign>=16.0<=16.4.2
Adobe InDesign>=17.0<=17.3
Apple macOS
Microsoft Windows
Event History
Sep 16, 2022
CVE Published
via MITRE·05:20 PM
Data Sourced
via MITRE·05:20 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this Adobe InDesign vulnerability?
The vulnerability ID for this Adobe InDesign vulnerability is CVE-2022-38413.
2
Which versions of Adobe InDesign are affected by this vulnerability?
Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by this vulnerability.
3
What is the severity rating of CVE-2022-38413?
CVE-2022-38413 has a severity rating of 7.8 (High).
4
What is the potential impact of this vulnerability?
The vulnerability could result in arbitrary code execution in the context of the current user.
5
Is user interaction required to exploit this vulnerability?
Yes, exploitation of this issue requires user interaction in that a victim must open a malicious file.