PT-2026-48137 · Adobe · Indesign

CVE-2026-34699

·

Published

2026-06-09

·

Updated

2026-08-27

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5.3 and earlier InDesign Desktop version 21.3
Description A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold. This issue can lead to arbitrary code execution within the context of the current user and requires user interaction, specifically the opening of a malicious file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-08070
CVE-2026-34699

Affected Products

Indesign