EUVD-2026-22443
GHSA-gvx9-4v4m-4c43
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (adobe) · only source for this CVE.
CVSS VectorVendor: adobe
Lifecycle Timeline
5DescriptionCVE.org
InDesign Desktop versions 20.5.2, 21.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AnalysisAI
Arbitrary code execution in Adobe InDesign Desktop versions through 21.2 allows unauthenticated attackers to execute malicious code with full user privileges by exploiting an out-of-bounds write vulnerability via a specially crafted InDesign file. Attack requires local access and user interaction to open the malicious document. No public exploit identified at time of analysis, though CVSS 7.8 reflects high impact if successfully exploited. Adobe has released security bulletin APSB26-32 addressing this memory corruption flaw.
Technical ContextAI
This vulnerability stems from CWE-787 (Out-of-bounds Write), a memory corruption class where software writes data past the end or before the beginning of an allocated buffer. In Adobe InDesign Desktop's file parsing engine, improper bounds checking when processing specially crafted InDesign documents allows attackers to overwrite adjacent memory regions. The affected product (CPE cpe:2.3:a:adobe:indesign_desktop) includes all versions up to and including 20.5.2 in the 20.x branch and 21.2 in the 21.x branch. Out-of-bounds write vulnerabilities are particularly dangerous in document processing applications because they can corrupt critical memory structures like function pointers, vtables, or return addresses, enabling control-flow hijacking and arbitrary code execution.
RemediationAI
Apply security updates detailed in Adobe Security Bulletin APSB26-32 immediately. Upgrade Adobe InDesign Desktop to the latest patched versions released by Adobe that address this out-of-bounds write vulnerability. Organizations should verify installations through Adobe Creative Cloud admin console and enforce centralized update policies. As an interim mitigation while patches are deployed, implement strict controls on opening InDesign files from untrusted sources, enable application sandboxing where available, and educate users on risks of opening unsolicited or suspicious InDesign documents. Review email gateway and endpoint security policies to scan or block potentially malicious InDesign files. Full remediation details and download links are available at https://helpx.adobe.com/security/products/indesign/apsb26-32.html.
More in Indesign Desktop
View allArbitrary code execution in Adobe InDesign Desktop 21.3, 20.5.3 and earlier stems from a use-after-free condition trigge
Arbitrary code execution in Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier allows unauthenticated attackers to
Arbitrary code execution in Adobe InDesign Desktop versions 21.3, 20.5.3 and earlier occurs through a heap-based buffer
Arbitrary code execution in Adobe InDesign Desktop 21.3, 20.5.3 and earlier occurs when a user opens a maliciously craft
Arbitrary code execution in Adobe InDesign Desktop versions 21.3, 20.5.3 and earlier occurs through an out-of-bounds wri
Arbitrary code execution in Adobe InDesign Desktop 21.3, 20.5.3 and earlier occurs via a heap-based buffer overflow (CWE
Arbitrary code execution in Adobe InDesign Desktop versions 21.3, 20.5.3 and earlier is possible when a user opens a mal
Arbitrary code execution in Adobe InDesign Desktop 21.3, 20.5.3 and earlier occurs through a stack-based buffer overflow
Arbitrary code execution in Adobe InDesign Desktop 21.3, 20.5.3 and earlier allows attackers to run code as the logged-i
Arbitrary code execution in Adobe InDesign Desktop versions 21.3, 20.5.3 and earlier occurs through a stack-based buffer
Heap-based buffer overflow in Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier enables arbitrary code execution
Heap-based buffer overflow in Adobe InDesign Desktop versions 20.5.2, 21.2 and earlier enables arbitrary code execution
Same weakness CWE-787 – Out-of-bounds Write
View allShare
External POC / Exploit Code
Leaving vuln.today