Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Adobe InDesign Crashes When Opening Malicious Files

CVE-2025-30320 · published 1 year ago
Summary

Adobe InDesign versions 19.5.2 and earlier can crash if you open a malicious file. This can happen if you open a file from an unknown source, which could be a security risk for your computer and your work. Update to a newer version of InDesign to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe indesign < 19.5.3
>= 20.0, < 20.3
cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:*
Original advisory text
InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vuln...
InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published13 May 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-30320 · NVD
Track software like this
Free during beta