CVE-2022-30676 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-38413 Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38413 Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38413

CVE-2022-38413 affects Adobe InDesign (16.x prior to 16.4.3 and 17.x prior to 17.4). It is a heap-based buffer overflow in SVG/file parsing that could allow arbitrary code execution in the context of the current user; exploitation requires user interaction (open a malicious file). Remediation ref...

CVE-2022-38415 Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38415 Adobe InDesign PCX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38415

Adobe InDesign CVE-2022-38415 is a heap-based buffer overflow in PCX file parsing that could allow arbitrary code execution when a user opens a crafted file. Affected versions include 16.4.2 and 17.3 (and earlier); exploitation requires user interaction. Connected documents corroborate the vulner...

CVE-2022-30675 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30675 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30675

Adobe InDesign 16.x prior to 16.4.3 and 17.x prior to 17.4 is affected by an out-of-bounds read vulnerability (CVE-2022-30675) that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. Remediation: Adobe APSB22-50 indicates fixes in 16.4.3 and 17.4; update...

CVE-2022-38414

CVE-2022-38414 affects Adobe InDesign 16.x before 16.4.3 and 17.x before 17.4, with a heap-based buffer overflow in SVG/file parsing that could lead to arbitrary code execution. Exploitation requires user interaction (opening a malicious file). The available connected documents confirm the vulner...

CVE-2022-38414 Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-38414 Adobe InDesign SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...

CVE-2022-30673

Adobe InDesign is affected by CVE-2022-30673: an out-of-bounds read in versions 16.4.2 and earlier and 17.3 and earlier that could disclose memory and bypass ASLR. Exploitation requires user interaction (opening a malicious file). A fix is available: update to InDesign 16.4.3 or 17.4 (per APSB22-...

CVE-2022-30673 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30673 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30674 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30674 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2022-30674

Concrete details from connected docs show that CVE-2022-30674 is addressed by updating the mingw-expat (XML parser Exp​at) package to version 2.4.9 in Fedora advisories for FC35–FC37. The Fedora security advisories state that the remote host’s mingw-expat package is vulnerable and that upgrading ...

CVE-2022-30672

Adobe InDesign is affected by CVE-2022-30672: an out-of-bounds read in versions 16.4.2 and earlier, and 17.3 and earlier. The vulnerability could disclose sensitive memory and enable bypass of mitigations like ASLR. Exploitation requires user interaction, as a victim must open a malicious file. N...