CVE-2023-44344: Adobe InDesign CC 2023 Memory Corruption Vulnerability V.
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44344?
CVE-2023-44344 is classified as a medium severity vulnerability due to its potential for sensitive memory disclosure.
How do I fix CVE-2023-44344?
To fix CVE-2023-44344, update Adobe InDesign to version 18.5.1 or later.
Who is affected by CVE-2023-44344?
CVE-2023-44344 affects Adobe InDesign versions 18.5 and earlier as well as 17.4.2 and earlier.
What is the impact of exploiting CVE-2023-44344?
Exploitation of CVE-2023-44344 could allow an attacker to disclose sensitive memory data.
What is an out-of-bounds read vulnerability in the context of CVE-2023-44344?
An out-of-bounds read vulnerability in CVE-2023-44344 allows attackers to access memory beyond the intended buffer, potentially exposing sensitive information.