CVE-2025-47136: InDesign Desktop | Integer Underflow (Wrap or Wraparound) (CWE-191)
Published Jul 8, 2025
·Updated
InDesign Desktop versions 19.5.3 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
5 affected components
Adobe InDesign Desktop<19.5.3
All of the following
Any of the following
Adobe InDesign<19.5.4
Adobe InDesign>=20.0<20.4
Any of the following
Apple macOS
Microsoft Windows
Event History
Jul 8, 2025
CVE Published
via MITRE·09:49 PM
Data Sourced
via MITRE·09:49 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47136?
CVE-2025-47136 is a critical vulnerability that can lead to arbitrary code execution.
2
How do I fix CVE-2025-47136?
To mitigate CVE-2025-47136, update Adobe InDesign Desktop to version 19.5.4 or later.
3
What versions of InDesign Desktop are affected by CVE-2025-47136?
CVE-2025-47136 affects Adobe InDesign Desktop versions 19.5.3 and earlier.
4
Is user interaction required to exploit CVE-2025-47136?
Yes, exploitation of CVE-2025-47136 requires user interaction, as the victim must open a malicious file.
5
What kind of vulnerability is CVE-2025-47136 classified as?
CVE-2025-47136 is classified as an Integer Underflow (Wrap or Wraparound) vulnerability.