PT-2025-20984 · Adobe · Indesign

CVE-2025-30319

·

Published

2025-05-13

·

Updated

2025-05-13

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Adobe InDesign Desktop versions ID19.5.2, ID20.2 and earlier
Description: The issue is a NULL Pointer Dereference that could lead to application denial-of-service. An attacker could exploit this to crash the application, causing a disruption in service. Exploitation requires user interaction, where a victim must open a malicious file.
Recommendations: For versions ID19.5.2 and earlier, update to a version later than ID20.2 to resolve the issue. For version ID20.2, update to a version later than ID20.2 to resolve the issue. As a temporary workaround, consider avoiding the opening of files from untrusted sources to minimize the risk of exploitation.

Fix

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-05699
CVE-2025-30319

Affected Products

Indesign