CVE-2023-44346: Adobe InDesign CC 2023 Memory Corruption Vulnerability VIII.
Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44346?
CVE-2023-44346 is considered to have a moderate severity level due to its potential to disclose sensitive memory.
How do I fix CVE-2023-44346?
To fix CVE-2023-44346, upgrade Adobe InDesign to version 18.5.1 or later, or to any version beyond 17.4.2.
Which Adobe InDesign versions are affected by CVE-2023-44346?
CVE-2023-44346 affects Adobe InDesign versions ID18.5 and earlier, as well as ID17.4.2 and earlier.
Could exploitation of CVE-2023-44346 allow any security mitigations to be bypassed?
Yes, exploitation of CVE-2023-44346 could allow attackers to bypass security mitigations such as ASLR.
What type of vulnerability is CVE-2023-44346 classified as?
CVE-2023-44346 is classified as an out-of-bounds read vulnerability.