PT-2025-32924 · Adobe · Indesign Desktop

Published 2025-08-12 · Updated 2025-08-13 · CVE-2025-54207

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier

Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier, are affected by an Access of Uninitialized Pointer issue. Successful exploitation of this issue could lead to arbitrary code execution within the context of the current user. Exploitation requires a user to open a malicious file.

Recommendations: Update InDesign Desktop to a version later than 20.4. Update InDesign Desktop to a version later than 19.5.4.

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2025-10296

CVE-2025-54207

Affected Products

Indesign Desktop

References · 7

• https://osv.dev/vulnerability/CVE-2025-54207 · Vendor Advisory
• https://helpx.adobe.com/security/products/indesign/apsb25-79.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54207 · Security Note
• https://bdu.fstec.ru/vul/2025-10296 · Security Note
• https://twitter.com/CVEnew/status/1955535805147123767 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1955536839915315564 · Twitter Post
• https://t.me/CVEtracker/29815 · Telegram Post