Product:
InDesign Desktop
Summary
InDesign Desktop versions 21.1, 20.5.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to services. Exploitation requires user interaction as a victim must open a malicious file.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-21358 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious file that, when opened by a user, triggers the heap-based buffer overflow. This requires the user to be tricked into opening the file, leading to a crash of the InDesign application and resulting in denial-of-service.
Affected Products
- InDesign Desktop versions 21.1 and earlier: Affected by a heap-based buffer overflow vulnerability that can lead to application crashes.
Mitigation
To mitigate this vulnerability, users should avoid opening files from untrusted sources and ensure they are using the latest version of InDesign Desktop. Regular updates and security patches from Adobe should be applied promptly to protect against known vulnerabilities.