PT-2025-28764 · Adobe · Indesign Desktop

Published 2025-07-08 · Updated 2025-10-14 · CVE-2025-47136

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 19.5.3 and earlier

Description: InDesign Desktop versions 19.5.3 and earlier are susceptible to an Integer Underflow vulnerability. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of the current user. User interaction is required, specifically opening a malicious file.

Recommendations: Update InDesign Desktop to a version later than 19.5.3.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

BDU:2025-08544

CVE-2025-47136

Affected Products

Indesign Desktop

References · 6

• https://helpx.adobe.com/security/products/indesign/apsb25-60.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08544 · Security Note
• https://osv.dev/vulnerability/CVE-2025-47136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47136 · Security Note
• https://twitter.com/CVEnew/status/1942924526796558721 · Twitter Post
• https://twitter.com/dailycve/status/1978233473857933778 · Twitter Post