CVE-2024-49549: InDesign Desktop | Out-of-bounds Read (CWE-125)
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49549?
CVE-2024-49549 has a high severity rating due to its potential for sensitive data disclosure through an out-of-bounds read.
How do I fix CVE-2024-49549?
To fix CVE-2024-49549, users should update Adobe InDesign to the latest version available.
Who is affected by CVE-2024-49549?
CVE-2024-49549 affects Adobe InDesign versions 19.5, 18.5.4, and earlier versions.
What impact does CVE-2024-49549 have on users?
Exploitation of CVE-2024-49549 may allow attackers to access sensitive memory, bypassing security mitigations like ASLR.
Is CVE-2024-49549 exploitable without user interaction?
Exploitation of CVE-2024-49549 generally requires user interaction to execute malicious content in InDesign.