CVE-2022-28854

CVE-2022-28854 affects Adobe InDesign 16.x (before 16.4.3) and 17.x (before 17.4). The issue is an out-of-bounds read that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). Public details across connected sources confirm the v...

CVE-2022-28854 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...