VYPR
← All advisories
Low severity3.3NVD Advisory· Published Jan 13, 2022· Updated Jun 17, 2026

CVE-2021-45059

CVE-2021-45059

Description

Adobe InDesign version 16.4 (and earlier) is affected by a use-after-free vulnerability in the processing of a JPEG2000 file that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected products

3
  • Adobe Inc./Indesign3 versions
    cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*range: <=16.4
    • (no CPE)range: <=16.4
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.