Michele D

An out-of-bounds read occurs when parsing a crafted file, which can lead to a read past the end of an allocated memory structure. This issue allows an attacker to execute code within the context of the current user, provided the victim opens a malicious file.

Improper Input Validation in the 'subscribeToEndpoints' function could result in a security feature bypass. An attacker could leverage this issue to bypass security measures and gain unauthorized access. Exploitation requires user interaction.

An Uncontrolled Resource Consumption issue exists where a high-privileged attacker can exhaust system resources. This can lead to a denial-of-service condition, resulting in reduced application speed. Exploitation does not require user interaction.

A Use After Free issue exists in Adobe After Effects. Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file.

InDesign Desktop versions 19.5.5 and 21.0 are susceptible to an Access of Uninitialized Pointer issue. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of the current user. User interaction is required, specifically, a victim must open a malicious file for exploitation to occur.

InCopy versions 21.0, 19.5.5, and earlier are susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with the privileges of the current user. Successful exploitation requires a user to open a specially crafted malicious file.