BlackKite: Home
Menu

PUBLISHED DATE: May 13, 2025CVE-2025-30319:
InDesign Desktop versions ID19.5.2,...

CVSS:
5.5
EPSS:
1.90%
Exploitability:
1.8
In KEV:
No
Description

InDesign Desktop versions ID19.5.2, ID20.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Products
Questions to Ask Vendors
  1. Can you confirm whether your systems are affected by CVE-2025-30319, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2025-30319 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions
References

Ready to get results you can trust?