CVE-2022-28857

Name of the Vulnerable Software and Affected Versions Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier

Description The issue is related to an out-of-bounds read that could lead to disclosure of sensitive memory. An attacker could leverage this to bypass mitigations such as ASLR. Exploitation requires user interaction, where a victim must open a malicious file. This allows an attacker to potentially gain unauthorized access to protected information.

Recommendations For Adobe InDesign versions 16.4.2 and earlier, update to a version later than 16.4.2 to resolve the issue. For Adobe InDesign versions 17.3 and earlier, update to a version later than 17.3 to resolve the issue. As a temporary workaround, consider avoiding the opening of files from untrusted sources to minimize the risk of exploitation.