Access of Memory Location After End of Buffer Vulnerabilities for Adobe InDesign

Description

Adobe InDesign versions 16.3 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

Affected Applications

Adobe InDesign

CVE References

CVE-2021-39820 CVE-2021-40727

Other References

https://helpx.adobe.com/security/products/indesign/apsb21-73.html