InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Adobe |
|
| Apple |
|
| Microsoft |
|
Configuration 1 [-]
| AND |
|
No data.
References
History
Wed, 14 May 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
|
| CPEs | cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Adobe
Adobe indesign Apple Apple macos Microsoft Microsoft windows |
Tue, 13 May 2025 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 13 May 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file. | |
| Title | InDesign Desktop | NULL Pointer Dereference (CWE-476) | |
| Weaknesses | CWE-476 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2025-05-13T17:25:54.960Z
Reserved: 2025-03-20T17:36:17.306Z
Link: CVE-2025-30319
Vulnrichment
Updated: 2025-05-13T17:25:51.529Z
NVD
Status : Analyzed
Published: 2025-05-13T17:15:59.567
Modified: 2025-05-14T14:28:51.907
Link: CVE-2025-30319
Redhat
No data.