CVE-2025-47098: InCopy | Access of Uninitialized Pointer (CWE-824)
Published Jul 8, 2025
·Updated
InCopy versions 20.3, 19.5.3 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
5 affected components
Adobe InCopy<20.3
All of the following
Any of the following
Adobe InCopy<19.5.4
Adobe InCopy>=20.0<20.4
Any of the following
Apple macOS
Microsoft Windows
Event History
Jul 8, 2025
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47098?
CVE-2025-47098 is rated as critical due to the potential for arbitrary code execution.
2
How do I fix CVE-2025-47098?
To fix CVE-2025-47098, upgrade Adobe InCopy to version 20.4 or later.
3
Which versions of Adobe InCopy are affected by CVE-2025-47098?
CVE-2025-47098 affects Adobe InCopy versions 20.3, 19.5.3, and earlier.
4
What can exploit CVE-2025-47098?
Exploitation of CVE-2025-47098 requires user interaction by opening a malicious file.
5
What type of vulnerability is CVE-2025-47098?
CVE-2025-47098 is an Access of Uninitialized Pointer vulnerability.